AIP-C01 Practice Test 4 — 25 Questions

Question 1

Which THREE metrics are best used for setting up auto-scaling policies on a SageMaker endpoint?

Accepted Answer

InvocationsPerInstance. InvocationsPerInstance, CPUUtilization, and GPUUtilization are the standard metrics to trigger scaling actions.

Answer

IAMUserLoginCount

Answer

S3RequestLatency

Question 2

Which THREE of the following are valid ways to monitor Amazon Bedrock model usage?

Accepted Answer

AWS CloudTrail logs.. CloudWatch metrics, AWS CloudTrail logs, and Usage billing reports are the primary ways to monitor usage.

Answer

AWS X-Ray service map.

Answer

Amazon S3 bucket logging.

Question 3

Which THREE factors should you consider when tuning your inference endpoint for cost-efficiency?

Accepted Answer

Auto Scaling policies based on custom metrics. Instance type, auto-scaling configuration, and model optimization (like quantization) are critical levers for cost efficiency.

Answer

CloudTrail log retention period

Answer

Number of S3 buckets used

Question 4

A developer is creating a test suite for an LLM application. Which THREE of the following metrics are commonly used to evaluate RAG system performance?

Accepted Answer

Answer Relevance. Faithfulness, answer relevance, and context precision are the key components of RAGAS evaluation.

Answer

Model Training Loss

Answer

Inference Latency

Question 5

Which THREE of the following are valid components of an Amazon Bedrock Agent test plan?

Accepted Answer

Validating the reasoning path of the agent.. Testing reasoning, tool invocation accuracy, and safety constraints are critical components of an agent test plan.

Answer

Verifying the S3 bucket encryption.

Answer

Measuring model training time.

Question 6

A company is setting up a governance framework for AI development. Which TWO of the following tools should they use to enforce safety and compliance in Amazon Bedrock?

Accepted Answer

Amazon Bedrock Model Evaluation jobs.. Guardrails and Model Evaluation jobs are the primary tools for enforcing safety and assessing compliance.

Answer

AWS Config.

Answer

Amazon Inspector.

Answer

AWS Systems Manager.

Question 7

When using Bedrock Converse API, how do you handle streaming responses?

Accepted Answer

ConverseStream. The ConverseStream operation is designed for streaming responses, providing chunks of data as they are generated.

Answer

InvokeModelStream

Answer

Poll the API until finished

Answer

Request a callback URL

Question 8

You are attempting to use a Bedrock Agent to query an internal database, but the agent constantly fails to understand the schema. What is the best way to improve the agent's performance?

Accepted Answer

Improve the OpenAPI schema documentation. Providing a clear, descriptive OpenAPI schema with high-quality descriptions for each field is critical for agent understanding.

Answer

Increase the agent's timeout

Answer

Use a Knowledge Base to store the schema

Answer

Upgrade the agent model

Question 9

A company is building a RAG application using Amazon Bedrock and needs to ensure that the data ingested into the knowledge base is filtered based on user identity. Which approach should the developer use?

Accepted Answer

Use Amazon Bedrock Knowledge Base metadata filtering during the retrieval phase to apply access controls.. Knowledge Base filters allow you to restrict retrieval results based on metadata attributes associated with the document chunks.

Answer

Use Lambda authorizers to filter the retrieved results after they are returned by the model.

Answer

Create separate vector indexes for every user role within the Knowledge Base configuration.

Answer

Implement fine-grained access control using IAM policies on the S3 bucket containing the source data.

Question 10

A compliance team requires that all prompts containing sensitive data be encrypted. How does Amazon Bedrock handle this during the request?

Accepted Answer

Amazon Bedrock uses TLS 1.2+ for encryption in transit.. Amazon Bedrock encrypts data in transit using TLS 1.2 and supports encryption at rest with KMS keys for logs and custom models.

Answer

Bedrock only supports encrypted prompts if a VPC endpoint is used.

Answer

The prompt must be base64 encoded.

Answer

The developer must manually encrypt the prompt string before calling the API.

Question 11

Which service should be used to monitor the cost and usage of API requests made to Amazon Bedrock models?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides detailed analytics and reporting on usage costs for all AWS services, including Bedrock.

Answer

Amazon CloudWatch Metrics

Answer

AWS Trusted Advisor

Answer

Amazon QuickSight

Question 12

A company is using a third-party model via Bedrock and needs to ensure that the model provider does not use their data to train their base models. What must they do?

Accepted Answer

Understand that AWS does not use customer data to train their foundation models. Amazon Bedrock operates under the AWS service terms, which state that AWS does not use customer data to train foundation models, including third-party models, unless the customer specifically opts in.

Answer

Disable all logging

Answer

Enable the 'Opt-out' setting in the Bedrock console

Answer

Encrypt all data with a customer-managed key

Question 13

You are using SageMaker JumpStart and need to enable 'Data Capture' for monitoring model inputs and outputs. Where is the captured data stored?

Accepted Answer

Amazon S3. SageMaker Data Capture automatically uploads captured request and response payloads to an S3 bucket.

Answer

Amazon RDS

Answer

Amazon CloudWatch Logs

Answer

Amazon ElastiCache

Question 14

When using Bedrock Knowledge Bases, which vector database is integrated natively to support managed RAG workflows?

Accepted Answer

Amazon OpenSearch Serverless. Amazon OpenSearch Serverless is the native vector store integration for Bedrock Knowledge Bases.

Answer

Amazon DynamoDB

Answer

Amazon ElastiCache

Answer

Amazon RDS for PostgreSQL

Question 15

Which THREE tasks are performed by a Bedrock Agent when an Action Group is invoked?

Accepted Answer

Mapping intent to an API definition. The agent parses the user intent, maps it to the API schema, and then calls the associated Lambda function.

Answer

Automatically scaling the API endpoint

Answer

Retraining the model on new data

Question 16

When migrating an on-premises RAG system to Amazon Bedrock, how should the team handle existing vector embeddings?

Accepted Answer

Re-embed the documents using a model supported by Amazon Bedrock.. Existing embeddings may not be compatible with Bedrock's supported models; they must be re-embedded using a supported model like Titan Embeddings to maintain consistent vector space.

Answer

Map the old embeddings to new dimensions using a linear function.

Answer

Use the Bedrock Import Vector API.

Answer

Import existing vectors directly into the OpenSearch index.

Question 17

Which AWS storage service is the primary source for synchronizing documents in an Amazon Bedrock Knowledge Base?

Accepted Answer

Amazon S3. Amazon S3 is the standard storage location for documents that are indexed by Bedrock Knowledge Bases.

Answer

Amazon EFS

Answer

AWS Backup

Answer

Amazon DynamoDB

Question 18

To prevent accidental deletion of a Knowledge Base, which feature should be applied?

Accepted Answer

Apply an IAM policy denying DeleteKnowledgeBase. AWS resource policies or IAM policies can be used to deny the 'Delete' action on the Knowledge Base resource.

Answer

Use AWS Backup

Answer

Enable MFA Delete on S3

Answer

Enable S3 Versioning

Question 19

A company is using Amazon Q Business. How can they restrict access to specific data sources for different groups of users?

Accepted Answer

Configure ACLs in the data source connector. Amazon Q Business uses access control lists (ACLs) synced from the data source to ensure users only retrieve information they have permissions to access.

Answer

Create separate Amazon Q applications

Answer

Manually delete documents for specific users

Answer

Apply IAM policies to the user's login

Question 20

Which THREE of these are valid methods for monitoring a Bedrock-based application?

Accepted Answer

AWS CloudTrail for API calls. CloudWatch metrics, CloudTrail auditing, and logging the raw requests/responses are standard.

Answer

Direct access to model training logs

Answer

Manual binary inspection