SAP-C03 Practice Test

Question 1 of 5

Single choice

A company is standardizing generative AI across 60 accounts. Only approved Amazon Bedrock foundation models may be invoked, and the restriction must hold even for account administrators. Which control enforces this best?

Choose one answer

A. An IAM permissions boundary in each account that lists the approved models and the teams allowed to use them
B. A Bedrock model invocation log that the security team reviews every week
C. An SCP at the organization root that denies model invocation outside an approved allow-list of models
D. A CloudWatch alarm on invocation counts for each team

Choose an answer or reveal it to continue.

Keyboard shortcuts:A to D or 1 to 4answerEntercheck the answer←→previous or nextFflag for review

SAP-C03AWS Certified Solutions Architect - Professionalpractice test