Which Scoping Matrix Scope Gives Most Security Ownership?
Short answer
D Building and training a generative AI model from scratch with company-owned data gives the company maximum security ownership across data, model, training and deployment.
Question
Which solution scope gives the company the MOST ownership of security responsibilities?
Key Takeaways
The question tests the inverse relationship between third-party reliance and customer security ownership; the trap is picking fine-tuning, which increases control but still rests on a provider's foundation model.
This AIF-C01 question ranks scopes in the Generative AI Security Scoping Matrix, and building and training a model from scratch (D) gives the customer the most security responsibility ownership.
Common mistake: Option C, fine-tuning a third-party foundation model, is the plausible trap: it raises responsibility for training data and model artifacts, but the provider still owns the base model, training infrastructure and underlying security.
Expert Analysis
Read the qualifier first The question asks which scope gives the company the MOST ownership of security responsibilities. That single word makes this a ranking question, not a "which is correct" question: you must order all four scopes from least to most customer control and pick the extreme. The matrix scales responsibility with how much of the stack the customer touches.
What each option rules out Option A describes consuming a third-party enterprise application with embedded generative AI. Here the vendor builds, hosts and secures the model; the customer only configures users and data, so responsibility ownership is minimal — eliminated immediately. Option B is a managed FM accessed through an API (roughly Scope 2): the provider secures the model and infrastructure, and the customer handles prompts, data and IAM, so it sits low on the scale. Option C adds fine-tuning with business-specific data, which raises the customer's duties around training data, checkpoints and the tuned model, but the underlying third-party FM and its training remain the provider's — it is more than B, still less than maximum. Comments support skipping A, B and C outright once the phrase "use 3rd party" appears.
Why D wins Option D — building and training a generative AI model from scratch using data the customer owns — spans the entire lifecycle: data collection and labeling, model architecture and weights, training infrastructure, deployment and monitoring. Every layer the customer controls is a layer the customer must secure, so ownership peaks here. Therefore D is the answer.
Official Reference
https://aws.amazon.com/ai/generative-ai/security/scoping-matrix/
This link opens the official vendor documentation in a new tab.
Exam Strategy
When a question asks MOST, LEAST or EXCEPT, first turn the options into a ranking before answering; scan for words like "third-party" or "embedded" that reveal how much of the stack the customer does not own, then anchor on the option describing full lifecycle control. On scope questions, remember that responsibility ownership grows with customization: consuming an application < calling an API < fine-tuning < training from scratch.
Frequently Asked Questions
How does the Generative AI Security Scoping Matrix rank security responsibility?
Does fine-tuning a third-party foundation model give full security ownership?
Which AIF-C01 objective covers the Generative AI Security Scoping Matrix?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 10 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 10
-
Jessiii 👍 3 Answered DBuilding and training a generative AI model from scratch by using specific data that a customer owns: When a company builds and trains a model from scratch using its own or customer-specific data, the company has full control over the entire development process, including data collection, model training, infrastructure management, and deployment. As a result, the company assumes the most responsibility for security in all areas, from data protection to model security and the underlying infrastructure.
-
jove 👍 3 Answered DD. Building and training a generative AI model from scratch by using specific data that a customer owns gives the company the most ownership of security responsibilities, as they are responsible for all aspects of the model's development and deployment.
-
Moon 👍 2 Answered DD: Building and training a generative AI model from scratch by using specific data that a customer owns. Explanation: When a company builds and trains a generative AI model from scratch, it assumes the most ownership of security responsibilities, including: Data security and compliance during training. Model development and training processes. Infrastructure and deployment security. Protecting the model from adversarial attacks. Ensuring ethical use of the model and safeguarding against bias and misuse. This approach provides complete control over the entire lifecycle of the AI solution but also places the greatest burden of responsibility on the company.
-
praveenas400 👍 2 Answered DJust skipped A,B,C when I saw the word use 3rd party...
-
eesa 👍 1 Answered DD. Building and training a generative AI model from scratch by using specific data that a customer owns. In this scenario, the company has the most control over the entire development and deployment process. This includes: Data security: The company is responsible for securing the training data, which might contain sensitive information. Model security: The company needs to implement measures to protect the model itself, including securing the training process, model parameters, and deployment infrastructure. Operational security: The company is responsible for securing the deployment environment and monitoring the model for potential vulnerabilities. While the other options involve some level of security responsibility, they rely on third-party providers to a greater extent. This reduces the company's direct control over the security aspects of the solution.
Show 5 more comments
-
denisjtorresg 👍 1 Answered DWhy D is correct: Building and training a custom generative AI model from scratch represents the highest level of ownership and control in the Generative AI Security Scoping Matrix (often categorized as Scope 5). The organization retains full lifecycle ownership of the training data, model architecture, weights, infrastructure, fine-tuning processes, and deployment environment, which means the company assumes the absolute most ownership of security, governance, compliance, and risk management responsibilities.
-
Rcosmos 👍 1 Answered DExplicação: De acordo com a Generative AI Security Scoping Matrix, quanto maior o controle e customização de uma solução, maior é a responsabilidade da empresa pela segurança. Opção D representa o maior nível de propriedade: ao construir e treinar um modelo do zero, a empresa assume controle total sobre o modelo, os dados, o treinamento, a implantação e a segurança em cada etapa. As demais opções têm menos responsabilidade direta porque envolvem componentes terceirizados:
-
gPqkfkrl 👍 1 Answered DBuilding and training a generative AI model from scratch gives the organization full control over the entire lifecycle (data, infrastructure, and model), resulting in the highest level of security responsibility ownership.
-
kyo 👍 1 Answered Dhttps://aws.amazon.com/ai/generative-ai/security/scoping-matrix/
-
65703c1 👍 1 Answered DD is the correct answer
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All AIF-C01 Questions
Access 100 questions with complete answers and detailed explanations.
View Full AIF-C01 Practice Test →