AIP-C01 Practice Test 1 — 10 Questions

Question 1

A company is using Amazon Q Business. How can they restrict access to specific data sources for different groups of users?

Accepted Answer

Configure ACLs in the data source connector. Amazon Q Business respects access control lists (ACLs) configured in the data source connector, so documents are only surfaced to users who have permission in the source system. When the connector indexes content, it ingests ACL information and enforces it at query time, ensuring each user sees only authorized data. This is the correct mechanism for restricting access to specific data sources per user group.

Answer

Create separate Amazon Q applications

Answer

Manually delete documents for specific users

Answer

Apply IAM policies to the user's login

Question 2

You need to ensure that all data sent to an Amazon Bedrock model is encrypted in transit using private connectivity. What is the recommended service?

Accepted Answer

AWS PrivateLink (VPC Endpoints). AWS PrivateLink (VPC Endpoints) is the recommended service because it creates a private, one-way connection between a VPC and Amazon Bedrock using interface endpoints powered by ENIs, keeping traffic on the AWS backbone and off the public internet. This satisfies the requirement for private connectivity with encryption in transit (TLS) to the Bedrock endpoint. It avoids the need for internet gateways, NAT devices, or public IPs.

Answer

AWS WAF

Answer

AWS CloudFront

Answer

AWS Certificate Manager

Question 3

Which SageMaker feature allows you to observe model performance drifts over time?

Accepted Answer

SageMaker Model Monitor. SageMaker Model Monitor automatically detects data drift, concept drift, and model quality issues.

Answer

SageMaker Pipelines

Answer

SageMaker Data Wrangler

Answer

SageMaker Clarify

Question 4

When configuring an Amazon Bedrock Knowledge Base, which setting helps optimize the retrieval process for RAG applications?

Accepted Answer

Adjusting the chunk size and overlap. Selecting the appropriate embedding model and defining chunks size are key to optimizing retrieval quality and performance.

Answer

Increasing the number of input tokens

Answer

Deleting the data source

Answer

Disabling encryption

Question 5

What is the primary function of the Bedrock 'Model Invocation Logs'?

Accepted Answer

To capture and store prompt/response payloads for auditing.. These logs are used for auditing and debugging by capturing the request and response payloads.

Answer

To throttle incoming requests.

Answer

To perform real-time model retraining.

Answer

To reduce inference costs.

Question 6

Which service should be used to manage user access to Amazon Bedrock models?

Accepted Answer

AWS IAM.. AWS IAM (Identity and Access Management) is the service used to control access to AWS resources, including Bedrock APIs.

Answer

Amazon Route 53.

Answer

Amazon SageMaker.

Answer

AWS Glue.

Question 7

A healthcare company is building a generative AI assistant on Amazon Bedrock that summarizes patient records. The compliance team requires that the assistant's outputs are traceable and that any harmful or biased content is detected before being shown to clinicians. The company wants to use AWS-native services and features. (Choose two.)

Accepted Answer

Enable model invocation logging in Amazon Bedrock to capture request and response metadata to Amazon CloudWatch Logs and Amazon S3.. Amazon Bedrock Guardrails evaluates prompts and completions against configurable policies to block harmful or biased content before it is presented, while model invocation logging captures detailed request and response data for traceability. Together they provide both preventive content moderation and a durable audit trail. AWS WAF, Amazon Macie, and AWS Trusted Advisor operate at different layers and cannot inspect or record natural language content for bias or harmful material.

Answer

Use AWS Trusted Advisor to review the Bedrock model for ethical AI compliance.

Answer

Enable Amazon Macie to automatically redact biased statements from Bedrock responses.

Answer

Configure AWS WAF to inspect the generative AI responses for biased language.

Question 8

You are building a chat application and notice sensitive internal data is leaking in responses. You have enabled Guardrails. What else should be checked?

Accepted Answer

Review the system prompt and the Knowledge Base document retrieval filters. Guardrails filter model inputs and outputs, but they do not control what data enters the prompt in the first place. If sensitive internal data is leaking, the likely sources are the system prompt (which may contain secrets or instructions that surface data) or the Knowledge Base retrieval filters (which may be returning documents the user should not see). Reviewing both is the correct next step.

Answer

Change the foundation model provider

Answer

Increase the temperature setting

Answer

Check if the model is fine-tuned on public data

Question 9

Which TWO of the following are supported as source data for Amazon Bedrock Knowledge Bases?

Accepted Answer

Atlassian Confluence.. S3 is the primary supported source, and Confluence is also natively supported as a data source.

Answer

Email server logs.

Answer

Social media live streams.

Answer

Local hard drive files.

Question 10

You are implementing a multi-agent system. Which method is most effective for ensuring the agents do not loop infinitely when coordinating tasks?

Accepted Answer

Implementing a maximum iteration count. A maximum iteration count (or recursion/step limit) is the standard guardrail in agent orchestration frameworks like LangChain, LangGraph, and AWS Bedrock Agents to bound execution. When agents can call each other or themselves, a hard cap on turns prevents runaway loops that burn tokens and never terminate. Once the cap is hit, the orchestrator returns the best partial result or raises a controlled error.

Answer

Caching agent responses

Answer

Increasing the model temperature

Answer

Using a smaller model