AIP-C01 Multiple Select — 50 Questions

Question 1

Which TWO steps are required to properly secure Bedrock Knowledge Bases?

Accepted Answer

Use IAM roles for the Knowledge Base to access data. Enabling encryption and managing IAM access are the primary security configurations.

Answer

Disable all encryption to increase performance

Answer

Place the Knowledge Base in a public subnet

Answer

Grant public read access to the S3 bucket

Question 2

You are designing a secure Generative AI architecture on AWS. Which TWO of the following are recommended practices for securing the data ingestion pipeline for RAG?

Accepted Answer

Enforce TLS 1.2+ for all data movement. Encrypting data in transit (TLS) and at rest (KMS) are fundamental for data pipeline security.

Answer

Disable all logging in the pipeline to prevent data exposure

Answer

Store API keys in plain text within the Lambda code

Answer

Store all documents in a public S3 bucket for ease of access

Question 3

When troubleshooting a SageMaker endpoint that consistently returns 503 Service Unavailable errors, which THREE areas should you investigate?

Accepted Answer

Instance memory usage. 503s typically point to capacity limits, health check failures, or resource exhaustion (memory/GPU).

Answer

IAM role permissions

Answer

Input JSON schema validation

Question 4

Which TWO factors are critical when choosing a model for a RAG architecture that requires high grounding accuracy?

Accepted Answer

The model's support for citation and source attribution.. Accuracy in RAG relies on model reasoning capability and the quality of the retrieved chunks.

Answer

The model's training date.

Answer

The model's ability to generate images.

Answer

The number of parameters in the model.

Question 5

Which THREE factors influence the cost of running an Amazon Bedrock Knowledge Base?

Accepted Answer

The amount of data stored in the vector database.. Costs are driven by the embedding model usage, vector storage, and the generation model usage during retrieval.

Answer

The number of concurrent IAM users.

Answer

The frequency of S3 bucket scans.

Question 6

When designing for compliance, which THREE actions are part of the 'Shared Responsibility Model' for an AWS customer?

Accepted Answer

Configuring encryption for the data at rest.. Data classification, encryption configuration, and IAM management are the customer's responsibility.

Answer

Maintaining the physical security of the data center.

Answer

Patching the underlying foundation model code.

Question 7

Which TWO features of Amazon Bedrock provide governance capabilities?

Accepted Answer

Amazon Bedrock Prompt Management. Prompt Management and Guardrails are core governance tools.

Answer

Amazon Bedrock API Gateway integration

Answer

Amazon Bedrock Model Pre-training

Answer

Amazon Bedrock Auto-scaling

Question 8

Which THREE strategies should be implemented to ensure responsible AI practices in a production workload?

Accepted Answer

Perform regular model evaluation for bias. Bias testing, transparency/logging, and continuous monitoring are pillars of responsible AI.

Answer

Exclude all logging to protect privacy

Answer

Allow users to train the model directly

Question 9

Which TWO metrics are natively available in Amazon CloudWatch for monitoring Bedrock model invocation performance?

Accepted Answer

InvocationLatency. InvocationLatency and InvocationClientErrors are standard metrics provided for Bedrock in CloudWatch.

Answer

VectorEmbeddingAccuracy

Answer

GPUUtilization

Answer

ModelTrainingLoss

Question 10

Which THREE items must be configured when setting up a new Knowledge Base in Amazon Bedrock?

Accepted Answer

Embedding model selection.. Embedding model, data source, and vector database are the three mandatory components for a Knowledge Base.

Answer

Model evaluation dataset.

Answer

External firewall rules.

Question 11

Which TWO types of models are generally available in Amazon Bedrock?

Accepted Answer

Embedding models.. Text generation models and embedding models are the two most common types available in Bedrock.

Answer

Network load balancer configurations.

Answer

Hardware drivers.

Answer

OS kernel images.

Question 12

A company is designing a RAG architecture. Which TWO of the following steps are required to successfully link an Amazon S3 source to an Amazon Bedrock Knowledge Base?

Accepted Answer

Configure an IAM role with S3 read access for Bedrock. The process requires selecting the data source (S3) and specifying the embedding model to convert text to vectors.

Answer

Create a Glue Data Catalog for the S3 bucket

Answer

Enable AWS WAF on the S3 bucket

Answer

Create a Lambda function to split PDFs manually

Question 13

A security auditor requests a report on Bedrock usage. Which TWO of the following AWS services can be used to generate this report?

Accepted Answer

Amazon CloudWatch.. CloudTrail and CloudWatch are the primary services for auditing API usage and logging application events.

Answer

AWS CodePipeline.

Answer

AWS AppConfig.

Answer

AWS Trusted Advisor.

Question 14

A developer is evaluating model performance for a specific task. Which THREE metrics are commonly used in the Bedrock Model Evaluation console?

Accepted Answer

Inference latency (time to first token).. Accuracy, latency, and toxicity are standard metrics provided in model evaluation frameworks.

Answer

S3 bucket storage size.

Answer

Number of active IAM roles.

Question 15

Which TWO of the following are valid ways to improve the relevance of retrieved documents in a RAG system?

Accepted Answer

Implement metadata filtering to narrow the search space.. Metadata filtering and choosing an optimal chunking strategy are key levers to improve retrieval accuracy.

Answer

Use a larger, more generic embedding model.

Answer

Increase the number of retrieved chunks to 1000.

Answer

Delete all indices and recreate them every hour.

Question 16

Which TWO of the following are supported as source data for Amazon Bedrock Knowledge Bases?

Accepted Answer

Atlassian Confluence.. S3 is the primary supported source, and Confluence is also natively supported as a data source.

Answer

Email server logs.

Answer

Social media live streams.

Answer

Local hard drive files.

Question 17

A company is setting up a secure RAG pipeline. Which THREE of the following are necessary to ensure data security?

Accepted Answer

Implement IAM policies with the principle of least privilege.. VPC endpoints, IAM policies, and KMS encryption are fundamental components for securing data pipelines in AWS.

Answer

Use public S3 endpoints with read-only access.

Answer

Use default AWS managed public keys.

Question 18

Which THREE actions can a developer take to mitigate hallucinations in a RAG application?

Accepted Answer

Use a clear system prompt that restricts the model to only use provided information.. Lowering temperature, providing context, and defining strict system prompts all help limit the model's creative deviation.

Answer

Use the retrieve-only approach and perform generation with a custom internal engine.

Answer

Allow the model to use its internal training data for any gap in knowledge.

Question 19

An enterprise is planning to implement generative AI with strict compliance requirements. Which THREE practices should the developer include to ensure data privacy and regulatory compliance?

Accepted Answer

Enable Amazon Bedrock Guardrails to filter PII. Proper compliance involves encryption, access control (IAM), and the use of Guardrails for content moderation.

Answer

Disable all CloudWatch logging to prevent data leakage

Answer

Store all prompts in plain text in S3 for auditing

Question 20

A team is preparing data for fine-tuning a custom model on Amazon Bedrock. Which TWO of the following are best practices for high-quality training datasets?

Accepted Answer

Provide data in JSONL format with clear prompt-response pairs. Dataset preparation requires high-quality, relevant data and appropriate formatting (JSONL) for successful fine-tuning.

Answer

Include as much raw data as possible, even if noisy

Answer

Use automated AI tools to generate the training data from scratch

Answer

Convert all data into a CSV format