AIF-C01 Fundamentals of Generative AI Practice Question
A healthcare organization wants to use generative AI to draft clinical notes from patient-physician conversations. They must comply with HIPAA and minimize false medical information. Which approach should they take?
⚠ Common exam trap
AWS often tests the misconception that a larger or more creative model (high temperature) is better for accuracy, when in fact grounding via RAG and HIPAA-eligible infrastructure (e.g., Amazon Bedrock with a BAA) is the only safe path for regulated healthcare data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Amazon Bedrock with a HIPAA-eligible foundation model and connect it to a medical knowledge base via RAG.
It combines a HIPAA-eligible foundation model via Amazon Bedrock with Retrieval-Augmented Generation (RAG) to ground responses in a curated medical knowledge base. This approach ensures compliance with HIPAA by using a service that supports Protected Health Information (PHI) processing under a Business Associate Agreement (BAA), while RAG reduces hallucination risk by retrieving factual clinical data rather than relying solely on the model's training.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Amazon SageMaker JumpStart with a publicly available clinical model and no additional modifications.
Why it's wrong here
SageMaker JumpStart hosts models but supplies no HIPAA-eligible guardrails, PHI redaction or hallucination controls, so clinical notes could expose protected data and fabricate content. It suits rapid prototyping of open models where compliance and factual accuracy are not constraints.
- ✗
Use a generic open-source LLM hosted on Amazon EC2 with manual prompt engineering.
Why it's wrong here
A generic open-source model on EC2 lacks HIPAA-eligible safeguards and medical grounding, so hallucinated clinical content and PHI exposure remain unaddressed. This approach fits low-risk general drafting tasks, not regulated clinical documentation requiring a managed service with a business associate agreement.
- ✓
Use Amazon Bedrock with a HIPAA-eligible foundation model and connect it to a medical knowledge base via RAG.
Why this is correct
Amazon Bedrock provides HIPAA-eligible models under a Business Associate Addendum, satisfying the compliance constraint. Retrieval Augmented Generation grounds responses in a curated medical knowledge base, reducing fabricated clinical content by supplying authoritative context at inference time rather than relying solely on parametric memory.
- ✗
Use Amazon Bedrock with a large foundation model and a high temperature setting for creativity.
Why it's wrong here
A high temperature setting deliberately increases sampling randomness, raising the likelihood of fabricated clinical content, and Bedrock alone does not satisfy HIPAA without a BAA and PHI safeguards. High temperature suits brainstorming or creative drafting where factual precision is irrelevant.
Go deeper
Related to this question
About these practice questions
This AIF-C01 question is part of Courseiva's 862-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.