AIF-C01 Applications of Foundation Models Practice Question
A healthcare startup is using Amazon Bedrock to build a patient education chatbot. The chatbot must generate responses that are empathetic, accurate, and compliant with medical privacy regulations. The startup wants to implement safeguards to prevent the model from generating harmful or inappropriate content. Which TWO actions should the startup take to meet these requirements? (Choose two.)
⚠ Common exam trap
The trap here is thinking that prompt engineering or low temperature settings are sufficient safeguards, when actual enforcement requires dedicated filtering services like Guardrails and Comprehend Medical.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Amazon Comprehend Medical to detect and redact protected health information (PHI) in user inputs and model outputs.
To prevent harmful content and ensure medical privacy compliance, the startup should use Amazon Bedrock Guardrails to filter harmful categories and denied topics, and Amazon Comprehend Medical to detect and redact PHI. Guardrails provide runtime content moderation, while Comprehend Medical specializes in medical data privacy. Together they address both safety and regulatory requirements. Other options like low temperature or prompt engineering do not enforce safeguards, and model evaluation is not a real-time filter.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use Amazon Comprehend Medical to detect and redact protected health information (PHI) in user inputs and model outputs.
Why this is correct
Amazon Comprehend Medical can identify protected health information (PHI) in text, enabling redaction before sending data to the model and before returning outputs to users. This helps comply with medical privacy regulations such as HIPAA. While Bedrock Guardrails also offer PII redaction, Comprehend Medical is specifically trained for medical entities. This action directly supports the privacy compliance requirement.
- ✓
Configure Amazon Bedrock Guardrails to filter harmful content and define denied topics.
Why this is correct
Amazon Bedrock Guardrails can be configured with content filters to block harmful categories such as hate, violence, and sexual content, and with denied topics to prevent discussions on sensitive subjects. This directly addresses the requirement to prevent harmful or inappropriate content. Guardrails also support PII redaction, which helps with medical privacy compliance. This is a core safeguard for responsible AI in a healthcare chatbot.
- ✗
Enable Amazon Bedrock model evaluation to automatically monitor and block harmful outputs in real time.
Why it's wrong here
Amazon Bedrock model evaluation is used to assess model performance on datasets, not to block outputs in real time. It provides metrics and reports for quality and safety, but it does not actively filter or prevent harmful content during inference. This option confuses evaluation with runtime guardrails. It does not meet the requirement for real-time prevention.
- ✗
Use a foundation model with a low temperature setting to reduce randomness.
Why it's wrong here
Lowering temperature reduces randomness and makes outputs more deterministic, but it does not filter harmful content or enforce topic restrictions. A low temperature could still produce inappropriate or non-compliant responses if the prompt or model biases lead that way. This option addresses consistency, not safety or compliance. It is not a substitute for content filtering mechanisms.
- ✗
Implement prompt engineering to instruct the model to be empathetic and avoid medical advice.
Why it's wrong here
Prompt engineering can guide tone and set boundaries, but it is not a robust safeguard against adversarial prompts or accidental harmful outputs. Models can ignore instructions, especially under complex inputs. While useful, it does not provide the enforceable filtering that regulations may require. This option alone is insufficient for preventing harmful content in a production healthcare setting.
Go deeper
Related to this question
About these practice questions
One of 862 original AIF-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.