Get Your CertAIF-C01PlayCompete
‹ All AIF-C01 questions

AIF-C01 Practice Question 80: Locating Sensitive Data at Rest

AWS Certified AI Practitioner (AIF-C01) · Test 8 · question 10 of 10

Security, Compliance, and Governance for AI Solutionseasy

Before ingesting a 4 TB archive of historical customer correspondence from Amazon S3 into a knowledge base, a privacy team needs to establish where in that archive personal data such as names, postal addresses and bank account numbers actually sits. Nobody in the company knows which prefixes are affected. Which service should they run first?

Select one answer
Show answer and explanation

Answer:

  • B. Amazon Macie

Amazon Macie *discovers sensitive data by using machine learning and pattern matching* and *automates discovery and reporting of sensitive data* held in Amazon S3. Its built-in managed data identifiers *can detect a large and growing list of sensitive data types for many countries and regions, including multiple types of personally identifiable information (PII), financial information, and credentials data*. A sensitive data discovery job lets the team choose the buckets and sampling depth and returns a finding for each object where sensitive data was found, which is exactly the map of the archive they lack (option B).

- A is wrong because AWS CloudTrail records API activity: who called which operation, when, from where. It can tell the team who has been reading the bucket, but it never looks inside the objects. - C is wrong because AWS Artifact is a portal for AWS's own compliance documents: SOC, ISO and PCI reports. It has no visibility into a customer's data at all. - D is wrong because Amazon Inspector scans workloads (EC2 instances, container images and Lambda functions) for software vulnerabilities and unintended network exposure. It assesses the compute, not the contents of S3 objects.

Reference: What is Amazon Macie?

Practice Test 8 ›

Study guides for AIF-C01

AI engineer roadmap 2026: skills, certs and the orderAI engineer roadmap for 2026: skills to learn in order, AI engineer vs ML engineer, which certifications fit each stage, and what to skip.
How AI Is Changing Software Jobs: Where to PrepareHow AI is changing software jobs: what history shows, the evidence on junior developers, what Klarna learned, new AI roles and five domains to prepare for.
How AWS Certification Exams Work: Scoring and RenewalHow AWS certification exams work: levels, booking, question types, unscored questions, scaled scores, pass marks, validity and how recertification works.
What Is Amazon Bedrock? Models, Pricing and GuardrailsWhat is Amazon Bedrock? How a request reaches a model, what happens to your data, token pricing, Guardrails, Knowledge Bases, AgentCore and the exam traps.
Google Cloud Generative AI Leader vs AWS AI PractitionerGoogle Cloud Generative AI Leader vs AWS AI Practitioner: format, cost, topics, free preparation and which certification to take first.
AWS certification cost in 2026, and free ways to prepareWhat every AWS certification costs in 2026 in USD and INR, retake and reschedule rules, the 50% voucher, and the free official ways to prepare.
AWS Generative AI Developer Professional (AIP-C01) guideWhat the AWS Certified Generative AI Developer – Professional (AIP-C01) exam covers - format, cost, the five domains, the services, and how to prepare.
Best AI certifications 2026: AWS, Google, Microsoft, ClaudeThe best AI certifications in 2026 from AWS, Google, Microsoft, Claude and Databricks, by level, with price, status and which one to take first.
Which AWS certification should you get? 2026 roadmapWhich AWS certification to get first, by role and experience, with each exam's status in October 2026, what is changing, and prices in USD and INR.
What Is RAG? How Retrieval-Augmented Generation WorksWhat RAG is and how it works: chunking, embeddings, vector search, hybrid search, reranking, GraphRAG and agentic RAG on AWS, Google and Azure.
Prompt engineering vs RAG vs fine-tuningWhen to use prompt engineering, retrieval-augmented generation, fine-tuning or continued pre-training, compared on cost, freshness, hallucination and privacy.