AIF-C01 Applications of Foundation Models Practice Question
A financial services company uses Amazon Bedrock to power an internal assistant that answers employee questions about HR policies. The company must ensure that the assistant never reveals sensitive employee data. The HR policy documents are stored in an Amazon S3 bucket and are updated frequently. The company wants the assistant to cite the exact policy document and section for each answer. Which solution meets these requirements with the LEAST operational overhead?
⚠ Common exam trap
The trap here is assuming that fine-tuning a model on internal documents will provide citations, when in fact fine-tuning does not produce source references and requires retraining for updates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an Amazon Bedrock knowledge base backed by the S3 bucket, and use the RetrieveAndGenerate API with citations enabled.
The company needs accurate, cited answers from frequently updated HR documents with minimal operational overhead. Amazon Bedrock knowledge bases integrate with S3, automatically manage indexing and retrieval, and support citations via the RetrieveAndGenerate API. This managed solution avoids custom infrastructure and ensures answers are grounded in the latest policies. Fine-tuning, custom retrieval, or relying on model training data all fail to meet the citation and maintenance requirements efficiently.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Build a custom retrieval system using Amazon OpenSearch Service and write a Lambda function to call the model with retrieved passages.
Why it's wrong here
While this approach can provide citations, it requires significant development and operational effort to set up and maintain the search cluster, embedding pipeline, and Lambda integration. Amazon Bedrock knowledge bases already provide this functionality as a managed service. The scenario asks for least operational overhead, so a custom build is not optimal. This option underestimates the maintenance burden.
- ✗
Use the model's built-in knowledge by prompting it to answer from its training data, and add a guardrail to filter sensitive information.
Why it's wrong here
The model's training data is not company-specific and may be outdated, so it cannot reliably answer HR policy questions or provide citations to internal documents. Guardrails can filter sensitive output but do not supply accurate, source-backed answers. This option relies on the model's general knowledge instead of the company's authoritative documents, failing the accuracy and citation requirements.
- ✗
Fine-tune a foundation model on the HR policy documents and deploy it with a guardrail that blocks sensitive data.
Why it's wrong here
Fine-tuning embeds policy knowledge into model weights but does not provide citations to exact documents and sections. It also requires retraining whenever policies change, adding operational overhead. Guardrails can help block sensitive data, but the combination does not meet the citation requirement. This option overlooks the need for source attribution and dynamic updates.
- ✓
Create an Amazon Bedrock knowledge base backed by the S3 bucket, and use the RetrieveAndGenerate API with citations enabled.
Why this is correct
Amazon Bedrock knowledge bases can be connected to an S3 bucket, automatically chunk and index documents, and support frequent updates. The RetrieveAndGenerate API can return generated answers with citations that point to the exact source documents and sections. This approach minimizes operational overhead because Bedrock manages the vector store and retrieval pipeline, and it meets both the citation and data freshness requirements.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
This AIF-C01 question is part of Courseiva's 862-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.