
Ultimate access to all questions.
A company wants to deploy a conversational chatbot to answer customer questions. The chatbot is based on a fine-tuned Amazon SageMaker JumpStart model. The application must comply with multiple regulatory frameworks. Which capabilities can the company show compliance for? (Select TWO.)
Explanation:
Correct Answers:
Why these are correct:
Threat detection (B): Regulatory frameworks often require organizations to implement security measures to detect and respond to potential threats. AWS provides various threat detection services (like Amazon GuardDuty, AWS Security Hub) that can help demonstrate compliance with security requirements in regulatory frameworks.
Data protection (C): This is a fundamental requirement in most regulatory frameworks (such as GDPR, HIPAA, PCI DSS). Data protection encompasses encryption, access controls, data classification, and privacy measures - all critical for regulatory compliance.
Why other options are incorrect:
A. Auto scaling inference endpoints: While important for performance and availability, auto-scaling is primarily an operational feature rather than a compliance capability. Regulatory frameworks focus on security, privacy, and data protection, not scalability features.
D. Cost optimization: Cost management is a business efficiency concern, not a regulatory compliance requirement. Regulatory frameworks don't typically mandate specific cost optimization practices.
E. Loosely coupled microservices: This is an architectural pattern that improves maintainability and scalability, but it's not a compliance requirement. Regulatory frameworks focus on outcomes (data protection, security) rather than specific implementation architectures.
Key Takeaway: When dealing with regulatory compliance, focus on security controls, data protection measures, and threat management capabilities rather than operational or architectural features.