Knowledge + Practice

AWS Certified AI Practitioner AIF-C01 (AIF-C01) — Questions 1–75

619 questions total · 9pages · All types, answers revealed

Take a mock exam Exam hub

Page 1 of 9

1

MCQeasy

A company that uses Amazon Bedrock for generating product descriptions wants to ensure that the output does not contain any confidential information from its proprietary database that is used as context. The company uses a knowledge base in Bedrock to augment the model. The security team is concerned that the model might inadvertently regurgitate exact strings from the knowledge base. The company wants to adopt a solution that prevents this while still allowing the model to use the knowledge base for generating relevant descriptions. What should the company do?

A.Configure Bedrock Guardrails with a 'Prompt/Response Output' filter to block responses that match exact phrases from the knowledge base.

B.Remove the knowledge base and rely solely on the model's pre-trained knowledge.

C.Reduce the maximum token limit for model responses so that it cannot generate long strings.

D.Encrypt the knowledge base data using AWS KMS with a unique key.

AnswerA

Guardrails can filter out responses that contain specific strings, preventing regurgitation.

Why this answer

Bedrock Guardrails can be configured with a 'Prompt/Response Output' filter that uses a deny list of exact phrases or patterns. This allows the model to use the knowledge base for context while blocking any generated responses that contain verbatim strings from the proprietary database, directly addressing the security team's concern about regurgitation.

Exam trap

The trap here is that candidates may confuse data-at-rest protection (encryption) with output filtering, or assume that limiting response length prevents data leakage, when in fact only a guardrail-based output filter can block exact string matches from the generated content.

How to eliminate wrong answers

Option B is wrong because removing the knowledge base eliminates the context needed for generating relevant product descriptions, defeating the purpose of augmentation. Option C is wrong because reducing the maximum token limit does not prevent regurgitation of exact strings; it only truncates responses, and short strings can still contain confidential data. Option D is wrong because encrypting the knowledge base data with AWS KMS protects data at rest and in transit but does not control or filter the model's output, so it cannot prevent the model from generating exact matches from the decrypted context.

Full explanation →

2

MCQhard

A company uses Amazon Bedrock with a custom model deployed via Amazon SageMaker. They want to monitor for data drift in input prompts over time. Which AWS service is best suited for this?

A.Amazon CloudWatch

B.Amazon SageMaker Model Monitor

C.AWS CloudTrail

D.Amazon Athena

AnswerB

Model Monitor can be configured to capture input data and detect drift using statistical methods.

Why this answer

Amazon SageMaker Model Monitor is the correct choice because it is specifically designed to detect data drift in machine learning models, including input prompts for custom models deployed via SageMaker. It continuously monitors the distribution of input data against a baseline and alerts when drift occurs, which aligns with the requirement to monitor input prompts over time.

Exam trap

The trap here is that candidates often confuse general monitoring services like CloudWatch with specialized ML monitoring tools, assuming CloudWatch can handle data drift detection when it actually lacks the statistical analysis required for such tasks.

How to eliminate wrong answers

Option A is wrong because Amazon CloudWatch is a monitoring service for AWS resources and applications (e.g., metrics, logs, alarms), but it does not have built-in capabilities to detect data drift in ML model inputs. Option C is wrong because AWS CloudTrail records API activity for auditing and governance, not for monitoring data drift in model inputs. Option D is wrong because Amazon Athena is an interactive query service for analyzing data in S3 using SQL, not a monitoring tool for data drift.

Full explanation →

3

MCQeasy

A financial services company is deploying a machine learning model to approve loans. They want to ensure that the model does not discriminate based on race or gender. Which AWS service or feature can help them detect bias in the model's predictions?

A.Amazon SageMaker Clarify

B.AWS CloudTrail

C.Amazon SageMaker Model Monitor

D.AWS Identity and Access Management (IAM)

AnswerA

Clarify offers bias detection metrics such as demographic parity and disparate impact, and provides feature importance explanations.

Why this answer

Amazon SageMaker Clarify provides bias detection metrics and explainability reports to help identify potential bias in ML models. The other options are about governance, monitoring, or drift detection.

Full explanation →

4

MCQhard

A company is building a multi-modal application that processes images and text to answer questions about product defects. Which foundation model approach is BEST?

A.Use an image captioning model and then analyze the caption text

B.Use a text-to-image generation model and analyze the generated image

C.Use a multi-modal foundation model that processes both images and text

D.Use a separate image analysis model and a text model, then combine outputs

AnswerC

Multi-modal models are designed for joint understanding of images and text.

Why this answer

Multi-modal foundation models (e.g., CLIP, Flamingo, GPT-4V) are specifically designed to jointly process and reason over images and text in a unified architecture. This allows the model to directly correlate visual defects with textual descriptions without intermediate lossy transformations, making it the most effective approach for a multi-modal QA task.

Exam trap

AWS often tests the misconception that combining two separate single-modal models (Option D) is equivalent to a true multi-modal model, but the trap is that late fusion lacks the joint embedding and cross-attention mechanisms needed for coherent multi-modal reasoning.

How to eliminate wrong answers

Option A is wrong because image captioning models convert the entire image into a single text caption, losing fine-grained spatial and defect-specific details that are critical for accurate defect analysis. Option B is wrong because text-to-image generation models create new images from text, which is the inverse of the required task and cannot analyze existing product images for defects. Option D is wrong because using separate models and combining outputs introduces a late-fusion bottleneck, where alignment between visual features and text is not learned end-to-end, leading to poorer performance on tasks requiring joint reasoning.

Full explanation →

5

MCQhard

Refer to the exhibit. You are trying to invoke a foundation model via Amazon Bedrock but receive this error. What should you do to resolve it?

A.Increase the service quota for Bedrock

B.Request model access in the Bedrock console

C.Attach the AmazonBedrockFullAccess IAM policy

D.Use a different AWS Region

AnswerB

Model access must be requested and approved before use.

Why this answer

The error indicates that the user has not been granted access to the specific foundation model in Amazon Bedrock. Even with valid IAM permissions, each model requires explicit access approval via the Bedrock console's 'Model access' section. Option B is correct because requesting model access there provisions the necessary service-level authorization.

Exam trap

AWS often tests the distinction between IAM permissions and service-level model access, trapping candidates who assume that a full-access IAM policy automatically grants access to all foundation models.

How to eliminate wrong answers

Option A is wrong because increasing the service quota addresses limits on concurrent invocations or throughput, not the 'access denied' error for a foundation model. Option C is wrong because the AmazonBedrockFullAccess IAM policy grants permissions to use Bedrock APIs, but it does not grant access to specific foundation models; model access is a separate approval process. Option D is wrong because the error is not region-specific; model access must be requested in each region where you intend to use the model, and changing regions without requesting access would produce the same error.

Full explanation →

6

MCQhard

A company runs a question-answering application on Amazon Bedrock that answers from a large knowledge base. Recently, users have reported that the model gives incomplete answers, often missing details from the middle of documents. The team suspects the chunking strategy is suboptimal. Which adjustment is MOST likely to improve completeness?

A.Change the embedding model to a more powerful one

B.Use overlapping chunks so that boundaries do not cut off meaningful content

C.Increase the chunk size to include more context per chunk

D.Decrease the chunk size to capture more granular details

AnswerB

Overlap ensures continuity and reduces the chance that important content is split across chunks.

Why this answer

Overlapping chunks ensure that sentences or concepts that span chunk boundaries are not lost, improving retrieval completeness. Larger chunks may cause loss of precision, smaller chunks may lose context, and embedding model change is not directly related to chunking.

Full explanation →

7

Multi-Selecthard

A company is developing a generative AI application using Amazon Bedrock for code generation. They want to reduce costs without sacrificing throughput. Which THREE approaches can help achieve cost optimization?

Select 3 answers

A.Always use the largest available model for best results

B.Right-size model selection by choosing the smallest model that meets accuracy requirements

C.Use batch inference for non-real-time workloads

D.Fine-tune a large foundation model on the company's codebase

E.Enable model caching to reuse previously generated responses for similar inputs

AnswersB, C, E

Using a smaller, cheaper model for appropriate tasks lowers costs.

Why this answer

Batch inference processes multiple requests together at a lower cost. Model caching stores previous responses to avoid recomputation. Right-sizing model selection means picking the smallest capable model.

Fine-tuning increases cost for custom models, and using larger models increases cost.

Full explanation →

8

MCQhard

A company is deploying a generative AI application that creates marketing copy. They want to ensure the outputs do not include harmful or inappropriate content. Which AWS service can enforce content policies and filter undesirable outputs?

A.AWS WAF

B.Amazon Comprehend

C.Amazon Bedrock Guardrails

D.AWS Shield

AnswerC

Bedrock Guardrails allows you to define content filters, deny topics, and apply safeguards to foundation model outputs, ensuring responsible AI use.

Why this answer

Amazon Bedrock Guardrails provides customizable safeguards to filter harmful content, deny topics, and apply other safety controls for generative AI applications.

Full explanation →

9

MCQmedium

A developer is using the Amazon Bedrock API to generate text. They notice that the model sometimes returns harmful content despite setting safety parameters. What is the BEST way to add an additional layer of content filtering?

A.Fine-tune the model on a curated safe dataset

B.Configure content filters in Amazon Bedrock Guardrails

C.Improve prompt engineering with more specific instructions

D.Use AWS WAF to filter API responses

AnswerB

Guardrails provide configurable content filters to block harmful content.

Why this answer

Amazon Bedrock Guardrails provides a dedicated, configurable content filtering layer that can block harmful content at inference time, independent of the model's built-in safety parameters. This allows developers to enforce custom policies (e.g., hate speech, violence) without modifying the model itself, making it the best additional safeguard.

Exam trap

The AIF-C01 exam often tests the misconception that fine-tuning or prompt engineering alone can fully prevent harmful outputs, when in fact a separate, configurable guardrail layer is the recommended approach for production-grade content filtering in Amazon Bedrock.

How to eliminate wrong answers

Option A is wrong because fine-tuning the model on a curated safe dataset adjusts the model's weights to reduce harmful outputs, but it does not guarantee filtering of all harmful content at inference and requires significant retraining effort; it is not an 'additional layer' but a model modification. Option C is wrong because improving prompt engineering with more specific instructions can guide the model's behavior but cannot reliably block harmful content that the model might generate despite instructions, as it lacks enforcement at the API response level. Option D is wrong because AWS WAF is a web application firewall designed to filter HTTP requests to web applications, not to inspect or filter the content of API responses from Bedrock; it operates at the network layer, not the application content layer.

Full explanation →

10

Multi-Selecthard

A company is designing a RAG pipeline for a legal document review system. They need to ingest hundreds of documents, create embeddings, and store them for retrieval. Which THREE steps are essential in the ingestion phase of the RAG pipeline?

Select 3 answers

A.Configure Bedrock Guardrails for the application

B.Chunk the documents into smaller pieces

C.Fine-tune the base model on legal documents

D.Generate embeddings for each chunk using an embedding model

E.Store the embeddings in a vector store

AnswersB, D, E

Chunking breaks documents into manageable sections for embedding and retrieval.

Why this answer

Document chunking, generating embeddings, and storing in a vector store are the core steps of ingestion. Fine-tuning the LLM is not part of RAG ingestion (it's a separate process). Configuring guardrails is a runtime concern, not ingestion.

Full explanation →

11

MCQeasy

Which Amazon Bedrock feature allows you to invoke a model and receive the response token by token as it is generated, reducing perceived latency for the end user?

A.Model invocation API

B.Provisioned throughput

C.Batch inference

D.Streaming responses

AnswerD

Streaming sends each token as it is generated, reducing time to first display.

Why this answer

Streaming responses in Amazon Bedrock allow the model to send back partial results token by token as they are generated, rather than waiting for the entire response to be complete. This reduces perceived latency for end users by enabling them to see the output incrementally, which is especially important for real-time applications like chatbots or interactive assistants.

Exam trap

The trap here is that candidates confuse the standard synchronous Model invocation API (which returns the full response at once) with the streaming capability, assuming that 'invocation' inherently includes streaming, when in fact a separate API call (InvokeModelWithResponseStream) is required.

How to eliminate wrong answers

Option A is wrong because the Model invocation API is the general endpoint used to call a model synchronously, but it does not inherently provide token-by-token streaming; streaming requires a separate mechanism (e.g., InvokeModelWithResponseStream). Option B is wrong because Provisioned Throughput is a pricing and capacity feature that guarantees a certain number of inference tokens per minute, but it does not change how responses are delivered (streaming vs. non-streaming). Option C is wrong because Batch inference processes multiple requests asynchronously in bulk and returns results after all are complete, which is the opposite of real-time token-by-token delivery.

Full explanation →

12

MCQeasy

A company wants to build a chatbot that responds to customer queries using a foundation model. They need low latency and want to avoid managing infrastructure. Which AWS service should they use?

A.Amazon EC2

B.AWS Lambda

C.Amazon Bedrock

D.Amazon SageMaker

AnswerC

Correct: Bedrock is serverless and provides API access to foundation models.

Why this answer

Amazon Bedrock is a fully managed service that provides access to foundation models (FMs) from leading AI providers via a simple API, eliminating the need to manage underlying infrastructure. It is designed for building generative AI applications like chatbots with low latency, as it handles model hosting, scaling, and inference optimization automatically. This makes it the ideal choice for the company's requirement of low-latency responses without infrastructure management.

Exam trap

AWS often tests the misconception that AWS Lambda can handle any serverless workload, but candidates must recognize that Lambda is unsuitable for large model inference due to its execution time, memory, and GPU limitations, whereas Bedrock is purpose-built for foundation model access.

How to eliminate wrong answers

Option A is wrong because Amazon EC2 requires you to provision, configure, and manage virtual servers, including installing and maintaining the foundation model and its dependencies, which contradicts the requirement to avoid managing infrastructure. Option B is wrong because AWS Lambda is a serverless compute service for running short-duration code (up to 15 minutes) and is not designed to host large foundation models; it lacks the GPU support and memory capacity needed for model inference. Option D is wrong because Amazon SageMaker is a machine learning platform that requires you to manage endpoints, instances, and scaling for model deployment, which still involves infrastructure management and does not provide the fully managed, API-based access to foundation models that Bedrock offers.

Full explanation →

13

MCQmedium

A developer needs to ensure that a generative AI application on Amazon Bedrock does not produce harmful or inappropriate content. Which feature should they configure?

A.Provisioned Throughput

B.Model Invocation Logging

C.Knowledge Bases for Amazon Bedrock

D.Guardrails for Amazon Bedrock

AnswerD

Guardrails enable content filtering, topic denial, and sensitive information redaction.

Why this answer

Guardrails for Amazon Bedrock is the correct feature because it allows developers to define policies that filter and block harmful or inappropriate content in both user inputs and model outputs. This includes configurable thresholds for topics, content filters (e.g., hate, insults, sexual, violence), and denied topics, ensuring the generative AI application adheres to safety and responsible AI requirements.

Exam trap

AWS often tests the distinction between monitoring/logging features (like Model Invocation Logging) and active content filtering features (like Guardrails), leading candidates to mistakenly choose logging as a safety mechanism when it only records data without blocking harmful content.

How to eliminate wrong answers

Option A is wrong because Provisioned Throughput is a pricing and capacity feature that reserves model inference capacity for consistent performance, not a content safety mechanism. Option B is wrong because Model Invocation Logging records API calls and responses for auditing and monitoring, but it does not actively filter or block harmful content. Option C is wrong because Knowledge Bases for Amazon Bedrock enables retrieval-augmented generation (RAG) by connecting to external data sources, but it does not provide content moderation or safety controls.

Full explanation →

14

MCQhard

A company is using Bedrock Knowledge Bases with Amazon OpenSearch Serverless as the vector store. They need to ensure that the vector search returns results within 500ms for real-time queries. The current average latency is 800ms. Which change is MOST likely to reduce latency?

A.Switch to a different embedding model with higher dimensions

B.Reduce the number of results returned (k) from 10 to 3

C.Change the vector store index type from 'hnsw' to 'ivf'

D.Increase the chunk size to reduce the number of chunks

AnswerB

Fewer results means the search algorithm scans less data and returns faster, directly reducing latency.

Why this answer

Reducing the number of results returned (k) reduces search time linearly. Changing chunk size or embedding model may affect relevance but not raw speed. Index type changes could help but require reindexing; reducing k is the most direct and simple change.

Full explanation →

15

MCQmedium

A company is building a chatbot using Amazon Bedrock. They want to ensure the model's responses are grounded in their internal knowledge base and avoid generating information outside that scope. Which feature should they use?

A.Amazon Bedrock Knowledge Bases

B.Agents for Amazon Bedrock

C.Model Evaluation on Amazon Bedrock

D.Guardrails for Amazon Bedrock

AnswerA

Knowledge Bases enable RAG by connecting FM to private data, grounding responses.

Why this answer

Amazon Bedrock Knowledge Bases is the correct feature because it allows you to connect a foundation model (FM) to your internal data sources, such as documents or databases, and use Retrieval Augmented Generation (RAG) to ground responses in that specific knowledge. This ensures the chatbot only generates information from the provided knowledge base, preventing hallucinations or out-of-scope content.

Exam trap

The AIF-C01 exam often tests the distinction between features that control content (Guardrails) versus features that provide source data (Knowledge Bases), leading candidates to mistakenly choose Guardrails when the question is about grounding responses in internal data.

How to eliminate wrong answers

Option B is wrong because Agents for Amazon Bedrock are designed to orchestrate multi-step tasks and interact with external APIs, not to restrict the model's responses to a specific knowledge base. Option C is wrong because Model Evaluation on Amazon Bedrock is used to assess model performance and safety, not to control the source of information for responses. Option D is wrong because Guardrails for Amazon Bedrock enforce content policies (e.g., filtering harmful or off-topic content) but do not ground responses in a specific internal knowledge base.

Full explanation →

16

MCQmedium

A company wants to build a customer service chatbot that answers questions about their internal policy documents. The documents are updated monthly, and the team cannot afford to retrain a model each time. Which approach is MOST appropriate?

A.Train a custom model from scratch on the policy documents each month

B.Use Retrieval-Augmented Generation (RAG) with the policy documents indexed in a vector store

C.Use a larger foundation model with a longer context window and paste all documents into each prompt

D.Fine-tune a base LLM on the policy documents monthly

AnswerB

RAG retrieves relevant document chunks at query time, ensuring the chatbot always answers from the latest uploaded documents without any model retraining.

Why this answer

RAG (Retrieval-Augmented Generation) allows the LLM to retrieve relevant document sections at inference time, so knowledge stays current without retraining. The other options either require expensive retraining for each update or lack document grounding.

Full explanation →

17

Multi-Selectmedium

A data scientist is preparing a dataset for training a linear regression model. The dataset contains missing values and categorical features. Which TWO actions are appropriate to perform during data preprocessing? (Select TWO.)

Select 2 answers

A.Normalize the target variable

B.Apply PCA to reduce dimensionality

C.Remove all rows with missing values

D.Encode categorical variables using one-hot encoding

E.Impute missing numerical values with the mean

AnswersD, E

Linear regression requires numerical input, so categorical variables must be encoded.

Why this answer

One-hot encoding is appropriate for converting categorical features into a numerical format that linear regression can process, as it creates binary columns for each category without implying ordinal relationships. This preserves the categorical information without introducing arbitrary numerical ordering that could bias the model.

Exam trap

The AWS AI Practitioner exam often tests the distinction between feature preprocessing (scaling, encoding, imputation) and target variable manipulation, leading candidates to incorrectly select normalization of the target variable as a necessary step.

Full explanation →

18

Multi-Selectmedium

A machine learning team uses Amazon SageMaker to train models. They need to ensure that only approved base models from the AWS Marketplace can be used, and that training jobs cannot access the internet. Which TWO configurations should they implement?

Select 2 answers

A.Use SageMaker Role Manager to create a role that denies access to the marketplace

B.Use SageMaker Model Registry to control which models are approved and enforce use via IAM policies

C.Create a VPC endpoint for SageMaker and S3

D.Enable data encryption at rest using KMS

E.Enable network isolation for the training job and place it in a private subnet with no internet access

AnswersB, E

Model Registry with IAM policies can restrict which models can be used for training.

Why this answer

To restrict model access, use SageMaker Studio's model registry or IAM policies to limit which models can be used. To prevent internet access, configure the training job with a VPC without a NAT gateway. Data encryption does not restrict model access.

The other options are not relevant.

Full explanation →

19

MCQhard

A company operates in a region where Amazon Bedrock is not available. They want to use generative AI but must keep data within the country. Which solution should they consider?

A.Use Amazon SageMaker to host an open-source model in the local region.

B.Wait for Bedrock to become available in their region; there is no alternative.

C.Use Amazon Bedrock in the nearest available region with cross-region inference.

D.Use an API from a third-party generative AI provider with AWS PrivateLink.

AnswerA

SageMaker is available in all regions and allows full control over data residency.

Why this answer

Amazon SageMaker allows you to host open-source models (e.g., Llama 2, Falcon) in any AWS region, including those where Bedrock is unavailable. This satisfies the data residency requirement because the model and data never leave the local region. SageMaker provides full control over the infrastructure, enabling compliance with local data sovereignty laws.

Exam trap

The trap here is that candidates assume Bedrock is the only AWS generative AI service, overlooking SageMaker's capability to host open-source models, which is a common misconception tested in the AIF-C01 exam.

How to eliminate wrong answers

Option B is wrong because waiting for Bedrock availability is unnecessary; SageMaker offers a viable alternative today. Option C is wrong because cross-region inference would send data outside the required country boundary, violating the data residency constraint. Option D is wrong because using a third-party API, even with AWS PrivateLink, still involves data leaving the AWS network to an external provider, which may not guarantee data remains within the country.

Full explanation →

20

MCQhard

An organization uses AWS Lake Formation to govern a data lake used for SageMaker training. They need to enforce row-level security so that different teams only see data relevant to their projects. Which Lake Formation feature should they use?

A.Cell-level security

B.Column-level security

C.Row-level security

D.Tag-based access control

AnswerC

Row-level security allows filtering rows based on conditions, enabling per-team data access.

Why this answer

Lake Formation's row-level security uses filters to restrict access to specific rows based on conditions.

Full explanation →

21

MCQhard

A data scientist is using Amazon SageMaker to train a model with data that resides in an S3 bucket owned by another AWS account. The training job fails with access denied errors. The data scientist has already been granted cross-account read access to the S3 bucket via a bucket policy. What additional configuration is required?

A.Modify the SageMaker execution role to include an s3:GetObject permission for the bucket and ensure the bucket policy grants access to that role

B.Add an AWS KMS key policy to allow cross-account decryption

C.Create a new VPC peering connection between the two accounts

D.Use AWS Lake Formation to grant cross-account permissions on the S3 data

AnswerA

The execution role must have explicit S3 read permissions, and the bucket policy must allow the role (or the account) to access the objects.

Why this answer

SageMaker training jobs run within a SageMaker execution role. The role must have a trust policy allowing SageMaker to assume it, and the role must have permissions to read from the S3 bucket. The bucket policy alone is insufficient if the execution role does not have the necessary S3 permissions.

Full explanation →

22

MCQmedium

A healthcare company is training a model on sensitive patient data using Amazon SageMaker. They need to ensure that individual patient data cannot be reverse-engineered from the model. Which technique should they implement during training?

A.Data encryption at rest

B.AWS Identity and Access Management (IAM) policies

C.Differential privacy

D.SageMaker Model Monitor

AnswerC

Differential privacy provides mathematical guarantees that the model does not memorize individual data points.

Why this answer

Differential privacy adds noise to the training process to protect individual records. Data encryption and IAM control access but do not prevent inference from model parameters; Model Monitor is for post-deployment monitoring.

Full explanation →

23

Multi-Selectmedium

A company is deploying a customer‑facing chatbot using Amazon Bedrock. They need to ensure the chatbot never reveals personally identifiable information (PII) and refuses to discuss the topic of 'employee salaries'. Which TWO Bedrock Guardrails features should they configure together? (Select TWO.)

Select 2 answers

A.Topic denial

B.Grounding check

C.PII detection and redaction

D.Bedrock Knowledge Base

E.Content filtering

AnswersA, C

Topic denial prevents the model from discussing defined topics like 'employee salaries'.

Why this answer

PII detection redacts sensitive data; topic denial blocks the salary topic. Content filtering handles toxicity, not PII or topics. Grounding ensures factual support, not blocking topics.

Knowledge base is for RAG, not guardrails.

Full explanation →

24

MCQmedium

A company is developing a speech-to-text application for a diverse user base. To ensure inclusive design, they test the model with different accents and dialects. They find that error rates are higher for certain accents. Which responsible AI principle is most directly violated?

A.Robustness

B.Fairness

C.Veracity

D.Privacy and security

AnswerB

Fairness ensures that the model performs equitably across different demographic or accent groups, which is violated here.

Why this answer

Fairness requires that AI systems do not create or reinforce disparate outcomes for different groups. Higher error rates for certain accents indicate a fairness issue.

Full explanation →

25

MCQeasy

A machine learning engineer wants to detect if sensitive data, such as personally identifiable information (PII), exists in a training dataset stored in S3 before training a model. Which AWS service should they use?

A.Amazon Inspector

B.Amazon Macie

C.Amazon GuardDuty

D.AWS Config

AnswerB

Macie automatically identifies sensitive data such as PII in S3 buckets.

Why this answer

Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data in S3 buckets.

Full explanation →

26

MCQeasy

A company is using Amazon Bedrock to generate responses for customer support. They want to ensure that the model does not expose personally identifiable information (PII) in its outputs. Which AWS feature can be configured to automatically redact PII from model responses?

A.Amazon Macie

B.Amazon SageMaker Model Monitor

C.Amazon Bedrock Guardrails

D.AWS CloudTrail

AnswerC

Bedrock Guardrails can be configured to identify and redact PII from model responses.

Why this answer

Amazon Bedrock Guardrails is the correct choice because it provides configurable policies that can automatically detect and redact personally identifiable information (PII) from model inputs and outputs. This feature is specifically designed for Amazon Bedrock to enforce content safety and compliance requirements, including PII redaction, without requiring custom code or external services.

Exam trap

The trap here is that candidates may confuse Amazon Macie (a data discovery service for S3) with a real-time content filtering capability, or assume that SageMaker Model Monitor can be applied to Bedrock, when in fact only Bedrock Guardrails provides native PII redaction for model responses.

How to eliminate wrong answers

Option A is wrong because Amazon Macie is a data security service that discovers and protects sensitive data in Amazon S3, not a feature for redacting PII from model responses in Amazon Bedrock. Option B is wrong because Amazon SageMaker Model Monitor detects data drift and model quality issues for SageMaker endpoints, not for Bedrock, and does not perform PII redaction. Option D is wrong because AWS CloudTrail records API activity for auditing and governance, not for modifying or filtering model responses.

Full explanation →

27

MCQhard

A company uses a Bedrock Agent to handle customer support tickets. The agent needs to look up order status from a legacy API that requires authentication. The agent should also escalate to a human if the query is not supported. Which combination of components should the developer configure?

A.Configure a Guardrail to block unsupported queries and return a static response.

B.Define an action group with a Lambda function that calls the legacy API, and configure the agent instructions to escalate when it cannot answer.

C.Use a Bedrock Knowledge Base to store order status information and rely on RAG to answer.

D.Fine-tune the model on historical tickets so it can guess order status.

AnswerB

Action groups invoke Lambda to call external APIs; agent instructions can include escalation rules.

Why this answer

Action groups define APIs or tools the agent can call, with Lambda functions implementing the logic (including authentication). The agent can decide to hand off to a human based on its instructions. Knowledge Bases are not needed for API lookup, and Guardrails do not handle escalations.

Full explanation →

28

MCQmedium

A data scientist is using SageMaker to train a model on a dataset with many features. They suspect some features are redundant. Which feature engineering technique would help?

A.Feature scaling

B.One-hot encoding

C.Principal Component Analysis (PCA)

D.Polynomial features

AnswerC

PCA reduces dimensionality by transforming correlated features into uncorrelated components, eliminating redundancy.

Why this answer

Principal Component Analysis (PCA) is a dimensionality reduction technique that transforms the original correlated features into a smaller set of uncorrelated principal components, effectively removing redundancy while preserving most of the variance in the data. In SageMaker, PCA can be applied via the built-in PCA algorithm or as a preprocessing step in a scikit-learn container to reduce feature space and eliminate multicollinearity.

Exam trap

The AIF-C01 exam often tests the distinction between feature reduction (PCA) and feature transformation (scaling, encoding, polynomial expansion) to see if candidates confuse techniques that change feature count versus those that only change feature values.

How to eliminate wrong answers

Option A is wrong because feature scaling (e.g., StandardScaler, MinMaxScaler) normalizes the range of features but does not remove redundant or correlated features; it only changes the scale. Option B is wrong because one-hot encoding is used to convert categorical variables into numerical format, not to address feature redundancy among many continuous or numerical features. Option D is wrong because polynomial features create interaction and higher-order terms, which actually increase the number of features and can introduce more redundancy, not reduce it.

Full explanation →

29

MCQhard

Refer to the exhibit. An IAM policy is attached to a user. Which models can the user invoke?

A.Only Claude v2

B.No models

C.Claude v2 and any model with a name containing 'claude'

D.Any model in the account

AnswerA

The Allow grants access to Claude v2; the Deny using NotResource denies everything else.

Why this answer

The IAM policy explicitly allows the `bedrock:InvokeModel` action only on the resource ARN `arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-v2`. This means the user can invoke only the Claude v2 model. No other models, including other Claude versions or any model with 'claude' in its name, are permitted because the resource ARN is exact and does not use wildcards.

Exam trap

The AIF-C01 exam often tests the distinction between an exact resource ARN and a wildcard pattern; candidates mistakenly assume that 'claude' in the model ID implies all Claude models are allowed, but without a wildcard, only the exact model specified is permitted.

How to eliminate wrong answers

Option B is wrong because the policy does allow invocation of Claude v2, so the user can invoke at least one model. Option C is wrong because the policy uses an exact resource ARN (`anthropic.claude-v2`), not a wildcard pattern like `*claude*`; models with 'claude' in their name but not exactly `claude-v2` are not allowed. Option D is wrong because the policy restricts invocation to a single specific model, not any model in the account.

Full explanation →

30

MCQhard

An organization uses Amazon Bedrock to generate content. They have implemented guardrails to block toxic content. However, some users are able to bypass the guardrails by encoding their prompts. What step should be taken to improve security?

A.Encode the prompts before sending to the model.

B.Enable prompt injection detection in the guardrail configuration.

C.Use a different foundation model that is less susceptible.

D.Restrict access to the model using IAM policies.

AnswerB

Prompt injection detection can identify and block encoded or malicious prompts.

Why this answer

Amazon Bedrock guardrails include a built-in prompt injection detection capability that can identify and block attempts to bypass content filters through encoded or obfuscated prompts. Enabling this feature specifically addresses the scenario where users encode their inputs to evade toxic content blocking, as it analyzes the decoded intent of the prompt rather than just the surface-level encoding.

Exam trap

The AIF-C01 exam often tests the misconception that encoding or encrypting inputs is a security measure, when in reality it is a common bypass technique that must be countered by content inspection mechanisms like prompt injection detection.

How to eliminate wrong answers

Option A is wrong because encoding the prompts before sending them to the model would not improve security; it would actually compound the problem by further obfuscating the input, making it harder for guardrails to detect toxic content. Option C is wrong because the susceptibility to encoded prompts is not a model-specific vulnerability; it is a function of the input processing layer, and switching foundation models would not prevent encoding-based bypasses. Option D is wrong because restricting access with IAM policies controls who can invoke the model but does not inspect or sanitize the content of prompts, so it cannot prevent users from submitting encoded toxic inputs.

Full explanation →

31

MCQmedium

A financial services company uses Amazon Bedrock to generate investment report summaries. They have strict compliance requirements that the model must not discuss certain topics like insider trading or unapproved financial advice. Which Bedrock feature should they use to deny these topics?

A.Prompt engineering with negative instructions

B.Bedrock Knowledge Bases

C.Bedrock Agents

D.Bedrock Guardrails

AnswerD

Guardrails allow configuring denied topics so the model avoids generating content about those subjects.

Why this answer

Bedrock Guardrails include topic denial policies to block specific subjects. Knowledge Bases, Agents, and prompt engineering alone cannot reliably enforce topic restrictions.

Full explanation →

32

MCQhard

A practitioner is using Amazon Bedrock to invoke Anthropic Claude for a text generation task. They need the model to output a JSON object with specific keys, and they have observed that the model occasionally produces malformed JSON. Which parameter adjustment is MOST likely to improve JSON formatting consistency?

A.Increase the top_k parameter

B.Decrease the temperature parameter

C.Increase the max_tokens parameter

D.Add a stop sequence of '}'

AnswerB

Lower temperature reduces randomness, producing more deterministic and well-formed outputs.

Why this answer

Decreasing the temperature parameter reduces the randomness of the model's output, making it more deterministic and less likely to deviate from the expected JSON structure. Lower temperature values (e.g., 0.1–0.3) encourage the model to choose higher-probability tokens, which improves formatting consistency for structured outputs like JSON.

Exam trap

AWS often tests the misconception that increasing randomness parameters (top_k, temperature) improves output quality, when in fact reducing randomness is the key to enforcing strict formatting rules like JSON syntax.

How to eliminate wrong answers

Option A is wrong because increasing top_k expands the pool of candidate tokens the model can sample from, which increases randomness and can worsen JSON formatting issues. Option C is wrong because max_tokens controls the maximum length of the output, not the formatting or structure; it does not affect the model's tendency to produce malformed JSON. Option D is wrong because adding a stop sequence of '}' would prematurely terminate the output at the first closing brace, potentially cutting off nested JSON objects or arrays, and does not enforce correct JSON syntax throughout the generation.

Full explanation →

33

MCQhard

A data scientist fine-tuned a large language model on Amazon SageMaker for financial report generation. The model produces responses that are too short and incomplete, often cutting off mid-sentence. What parameter should be adjusted first?

A.Increase the temperature parameter

B.Increase the top_p parameter

C.Increase the maximum token count

D.Switch to a different foundation model

AnswerC

Max tokens sets a hard limit on the number of tokens generated; raising it allows longer responses.

Why this answer

The max tokens parameter limits the length of generated responses. Increasing it allows the model to produce longer completions. Temperature, top_p, and model change affect quality or diversity, but not the length cap.

Full explanation →

34

MCQeasy

A data scientist needs to grant an IAM user access to a specific Amazon SageMaker notebook instance. The user should only be able to start and stop the notebook instance, but not delete it. Which IAM policy statement should be used?

A.{"Effect":"Allow","Action":["sagemaker:Start*","sagemaker:Stop*"],"Resource":"*"}

B.{"Effect":"Allow","Action":["sagemaker:StartNotebookInstance","sagemaker:StopNotebookInstance"],"Resource":"arn:aws:sagemaker:us-east-1:123456789012:notebook-instance/MyNotebook"}

C.{"Effect":"Allow","Action":"sagemaker:*","Resource":"*"}

D.{"Effect":"Allow","Action":"sagemaker:*","Resource":"arn:aws:sagemaker:us-east-1:123456789012:notebook-instance/MyNotebook"}

AnswerB

Grants only start and stop on the specific resource.

Why this answer

It uses the specific actions `sagemaker:StartNotebookInstance` and `sagemaker:StopNotebookInstance` with a resource ARN that targets only the intended notebook instance. This grants the least privilege required to start and stop the instance while explicitly preventing deletion, as no delete action is included. The resource ARN restricts the policy to a single notebook instance, ensuring the user cannot affect other resources.

Exam trap

The trap here is that candidates often choose a wildcard action like `sagemaker:Start*` or `sagemaker:*` thinking it covers the needed actions, but they overlook that these patterns grant unintended permissions (e.g., delete or other start/stop actions on different resources), violating the principle of least privilege.

How to eliminate wrong answers

Option A is wrong because it uses wildcard actions `sagemaker:Start*` and `sagemaker:Stop*`, which could match unintended actions like `sagemaker:StartPipelineExecution` or `sagemaker:StopTrainingJob`, and the resource `*` grants access to all SageMaker resources, violating least privilege. Option C is wrong because `sagemaker:*` allows all SageMaker actions, including `sagemaker:DeleteNotebookInstance`, which the user should not have. Option D is wrong because `sagemaker:*` on a specific resource still grants all actions on that notebook instance, including deletion, which exceeds the required permissions.

Full explanation →

35

MCQmedium

A company wants to send personalized product recommendations to customers based on their browsing history and previous purchases. Which AWS service is BEST suited for this?

A.Amazon Personalize

B.Amazon SageMaker built-in factorization machines

C.Amazon Forecast

D.Amazon Rekognition

AnswerA

Personalize is designed for real-time personalized recommendations based on user behavior.

Why this answer

Amazon Personalize is a fully managed machine learning service specifically designed to build real-time personalized recommendation systems. It uses the same technology as Amazon.com's recommendation engine, processing user-item interaction data (browsing history, purchases) to generate tailored product suggestions. This makes it the ideal choice for the described use case.

Exam trap

The trap here is that candidates might confuse Amazon SageMaker's general ML capabilities with a specialized managed service like Amazon Personalize, assuming SageMaker's built-in algorithms are equally suited for recommendation tasks without considering the operational overhead and lack of pre-built recommendation pipelines.

How to eliminate wrong answers

Option B is wrong because Amazon SageMaker built-in factorization machines are a general-purpose algorithm for matrix factorization, requiring significant custom data preparation, model training, and deployment effort, whereas Amazon Personalize provides an end-to-end managed solution with built-in recommendation models. Option C is wrong because Amazon Forecast is designed for time-series forecasting (e.g., demand planning, sales predictions), not for generating personalized product recommendations based on user behavior. Option D is wrong because Amazon Rekognition is a computer vision service for image and video analysis (e.g., object detection, facial recognition), which is unrelated to recommendation systems.

Full explanation →

36

Multi-Selectmedium

A company is evaluating the output quality of a summarisation model using Amazon Bedrock Model Evaluation. They want to use both automated and human evaluation. Which THREE components can they configure as part of a model evaluation job? (Choose THREE.)

Select 3 answers

A.A human evaluation workforce configuration

B.An Amazon Bedrock Agent for orchestration

C.An automated metrics suite including ROUGE and BERTScore

D.The foundation model to be evaluated

E.A vector store index for retrieval

AnswersA, C, D

Human evaluation can be set up with a private workforce.

Why this answer

In Bedrock Model Evaluation, you can specify the model, evaluation dataset, automated metrics, and human review workforce. Prompt template and inference parameters are part of the configuration.

Full explanation →

37

MCQmedium

An organization wants to prototype a new generative AI application and allow multiple team members to collaborate on prompt engineering and model selection without writing code. Which tool should they use?

A.Amazon SageMaker Canvas

B.Amazon Bedrock Playground

C.Amazon CodeWhisperer

D.Amazon Bedrock Studio

AnswerD

Correct. Bedrock Studio supports collaborative prototyping.

Why this answer

Amazon Bedrock Studio is a web-based collaborative environment for prompt engineering, model experimentation, and building generative AI applications without coding. Bedrock Playground is for single-user testing. SageMaker Canvas and CodeWhisperer serve different purposes.

Full explanation →

38

MCQmedium

A company wants to use Amazon Bedrock to generate responses grounded in their proprietary knowledge base. They need to minimize hallucinations and ensure responses are based on the provided documents. Which feature should they enable?

A.Topic restrictions

B.Word filters

C.Grounding check

D.Content filters

AnswerC

Grounding check validates model responses against a source, ensuring alignment with provided documents.

Why this answer

Grounding check in Bedrock Guardrails verifies that the model's response is supported by the source documents, reducing hallucinations.

Full explanation →

39

MCQmedium

A company deploys an Amazon Bedrock agent that uses a knowledge base with sensitive financial documents. The security team requires that all data retrieval queries be logged for auditing, and that the LLM responses do not contain any personally identifiable information (PII). What combination of services should the company use?

A.Enable AWS CloudTrail for API logging and use Amazon GuardDuty to detect PII in responses.

B.Use AWS Config to monitor Bedrock resource configurations and apply an IAM policy to restrict PII.

C.Enable Amazon CloudWatch Logs for the Bedrock agent and use Amazon Comprehend to redact PII from responses.

D.Use Amazon S3 server access logs for the knowledge base and enable Amazon Macie to redact PII.

AnswerC

CloudWatch Logs can capture query logs, and Amazon Comprehend can detect and redact PII from responses.

Why this answer

Amazon CloudWatch Logs can capture query logs for the Bedrock agent, and Amazon Comprehend can detect and redact PII from responses. Option A is wrong because GuardDuty is for threat detection, not PII redaction. Option B is wrong because AWS Config is for resource compliance, not logging queries.

Option D is wrong because Macie is for data discovery in S3, not real-time PII redaction in responses.

Full explanation →

40

MCQhard

A financial services company is deploying a foundation model on Amazon Bedrock to generate compliance reports from internal audit logs. The model must not output any personally identifiable information (PII). They have configured a Bedrock Guardrail with sensitive information filters set to the 'HIGH' sensitivity level. During testing in a staging environment, testers still observed PII being occasionally generated in the report outputs. The guardrail did not block these instances because the PII was embedded in a context that the guardrail's pattern matching did not catch (e.g., structured JSON data with embedded names). The company requires a solution that minimizes latency and cost, as they process thousands of reports daily. They cannot afford to increase inference time significantly due to strict SLAs. They also want to avoid re-engineering the entire solution. Which additional step should they take to effectively eliminate PII leakage while maintaining performance?

A.Add a prompt instruction to the model to never output PII, with few-shot examples of non-PII outputs.

B.Fine-tune the foundation model on a dataset that excludes PII.

C.Increase the guardrail sensitivity to 'MAXIMUM'.

D.Implement a post-processing Lambda function that uses Amazon Comprehend's PII detection to scan and redact any PII from the model output before returning it.

AnswerD

Correct: Amazon Comprehend provides robust PII detection that can catch context-based PII. The Lambda function can be optimized for low latency and added cost is minimal.

Why this answer

Amazon Comprehend's PII detection API can be invoked as a post-processing step to scan and redact PII from the model output without requiring any changes to the model or guardrail configuration. This approach adds minimal latency (typically under 100ms per request) and cost per API call is low, making it suitable for high-throughput scenarios. It directly addresses the guardrail's failure to catch PII embedded in structured contexts like JSON, as Comprehend uses machine learning models that can identify PII even when it's not in plain text patterns.

Exam trap

The trap here is that candidates assume increasing guardrail sensitivity or prompt engineering can solve all PII detection failures, but they overlook that guardrails rely on pattern matching and cannot handle contextually embedded PII, whereas a dedicated ML-based detection service like Amazon Comprehend is designed for that exact scenario.

How to eliminate wrong answers

Option A is wrong because prompt instructions and few-shot examples are not reliable for preventing PII leakage; the model may still generate PII due to its training data or contextual reasoning, and this approach adds no deterministic enforcement. Option B is wrong because fine-tuning a foundation model to exclude PII is expensive, time-consuming, and requires a large curated dataset; it also risks degrading model performance on the compliance reporting task and does not guarantee elimination of all PII. Option C is wrong because the guardrail's sensitivity levels (HIGH, MAXIMUM) only affect pattern-matching rules and confidence thresholds; they cannot detect PII embedded in non-standard formats like structured JSON, so increasing sensitivity does not solve the core issue.

Full explanation →

41

Multi-Selecthard

Which TWO are best practices for model monitoring in production on AWS?

Select 2 answers

A.Disable logging to reduce latency

B.Use only CPU instances

C.Monitor input data drift

D.Retrain model daily

E.Monitor prediction drift

AnswersC, E

Data drift detection helps identify when the distribution of input data changes, affecting model accuracy.

Why this answer

Monitoring input data drift is a best practice for detecting changes in the distribution of incoming features compared to the training data. This helps identify when the model's assumptions about the data are no longer valid, which can degrade performance. AWS services like Amazon SageMaker Model Monitor can automatically track and alert on data drift.

Exam trap

The AIF-C01 exam often tests the misconception that retraining on a fixed schedule (e.g., daily) is a best practice, when in reality it should be event-driven based on drift or performance metrics.

Full explanation →

42

MCQhard

A healthcare AI system predicts patient diagnoses. The data collection process primarily samples from urban hospitals, leading to underrepresentation of rural populations. Which type of bias is this, and what is the most effective mitigation strategy?

A.Representation bias; collect additional data from rural hospitals

B.Historical bias; reweight urban samples to reduce their influence

C.Aggregation bias; use regularization to simplify the model

D.Measurement bias; apply data augmentation to rural records

AnswerA

Representation bias arises from non-representative sampling; collecting more data from the underrepresented group directly addresses the root cause.

Why this answer

Representation bias occurs when a dataset does not adequately represent the target population. The best mitigation is to collect additional data from rural areas to balance representation. Weighting can help but is less effective than obtaining representative data.

Historical bias is about past societal biases, not sampling. Measurement bias is about how features are measured. Regularization does not fix data imbalance.

Full explanation →

43

MCQeasy

Which AWS service provides a serverless experience for building and scaling generative AI applications with access to various foundation models?

A.Amazon Bedrock

B.Amazon SageMaker

C.Amazon Lex

D.AWS Lambda

AnswerA

Bedrock provides a serverless experience with pre-trained foundation models from leading AI companies.

Why this answer

Amazon Bedrock is a fully managed service that provides a serverless experience for building and scaling generative AI applications. It offers access to a variety of foundation models (FMs) from providers like AI21 Labs, Anthropic, Cohere, Meta, Stability AI, and Amazon via a single API, without the need to manage underlying infrastructure.

Exam trap

The trap here is that candidates may confuse Amazon SageMaker's broad ML capabilities with the specific serverless, foundation-model-focused offering of Amazon Bedrock, or mistakenly think AWS Lambda alone provides generative AI model access when it is merely a compute trigger.

How to eliminate wrong answers

Option B is wrong because Amazon SageMaker is a comprehensive machine learning (ML) platform that requires users to manage the entire ML lifecycle, including provisioning instances, training custom models, and deploying endpoints; it is not a serverless service specifically designed for accessing pre-built foundation models. Option C is wrong because Amazon Lex is a service for building conversational interfaces (chatbots) using automatic speech recognition (ASR) and natural language understanding (NLU), and it does not provide access to foundation models for generative AI tasks. Option D is wrong because AWS Lambda is a serverless compute service that runs code in response to events, but it does not natively provide access to foundation models or a managed API for generative AI; it can be used as part of a solution but is not the primary service for building and scaling generative AI applications with FMs.

Full explanation →

44

MCQmedium

A company wants to use Amazon Bedrock to generate images from text descriptions. Which model should they use?

A.Amazon Titan Image Generator

B.Stable Diffusion XL

C.Amazon Titan Text

D.Amazon Polly

AnswerA

Amazon Titan Image Generator is purpose-built for text-to-image generation within Bedrock.

Why this answer

Amazon Titan Image Generator is the correct choice because it is specifically designed by AWS for generating images from text descriptions within Amazon Bedrock. It leverages a diffusion-based architecture to create high-quality images, making it the native and optimal model for this task on the platform.

Exam trap

The trap here is that candidates may confuse Stable Diffusion XL as the default image generation model for Bedrock due to its popularity, but Amazon Bedrock prioritizes its own first-party models like Titan for native integration and support.

How to eliminate wrong answers

Option B is wrong because Stable Diffusion XL, while capable of generating images from text, is an open-source model that is not natively integrated into Amazon Bedrock as a first-party offering; it would require additional setup or third-party integration. Option C is wrong because Amazon Titan Text is a large language model (LLM) designed for text generation tasks such as summarization, translation, and question-answering, not for image generation. Option D is wrong because Amazon Polly is a text-to-speech service that converts text into lifelike speech, not a generative AI model for creating images.

Full explanation →

45

MCQmedium

A company needs to convert a large number of recorded customer service calls into text for analysis. Which AWS service should they use?

A.Amazon Textract

B.Amazon Comprehend

C.Amazon Transcribe

D.Amazon Polly

AnswerC

Transcribe is designed for automatic speech recognition (ASR) to convert audio to text.

Why this answer

Amazon Transcribe is the correct service because it is specifically designed to convert speech from audio files (such as recorded customer service calls) into text using automatic speech recognition (ASR). This directly matches the requirement to transcribe audio content for subsequent text analysis.

Exam trap

The trap here is confusing Amazon Transcribe (speech-to-text) with Amazon Polly (text-to-speech) or Amazon Textract (text from images), as candidates often misremember which AWS service handles audio transcription versus document text extraction.

How to eliminate wrong answers

Option A is wrong because Amazon Textract is designed to extract text and data from scanned documents and images (e.g., PDFs, forms), not from audio recordings. Option B is wrong because Amazon Comprehend is a natural language processing (NLP) service that analyzes text for insights like sentiment or entities, but it cannot convert speech to text. Option D is wrong because Amazon Polly is a text-to-speech service that converts text into lifelike speech, the opposite of the required speech-to-text conversion.

Full explanation →

46

MCQeasy

Refer to the exhibit. A data scientist ran a training job on Amazon SageMaker. The job failed with the error shown. What is the most likely cause?

A.The S3 input path is incorrect

B.The IAM role does not have permission to access S3

C.The training code has a syntax error

D.The batch size is too large for the instance's GPU memory

AnswerD

The error shows CUDA out of memory, typically due to batch size or model size exceeding GPU memory.

Why this answer

The error message indicates a CUDA out-of-memory error, which occurs when the GPU memory is insufficient for the requested batch size. Option D is correct because increasing the batch size beyond the GPU's memory capacity causes the training job to fail with this specific error.

Exam trap

AWS often tests the distinction between infrastructure errors (S3, IAM) and runtime errors (CUDA memory), where candidates mistakenly attribute a GPU memory error to a misconfiguration in data access or code syntax.

How to eliminate wrong answers

Option A is wrong because an incorrect S3 input path would result in a 'NoSuchKey' or '404' error, not a CUDA out-of-memory error. Option B is wrong because an IAM role lacking S3 permissions would produce an 'AccessDenied' error, not a GPU memory error. Option C is wrong because a syntax error in the training code would raise a Python exception (e.g., SyntaxError) before any GPU operations, not a CUDA memory error.

Full explanation →

47

MCQhard

A financial services company is deploying a generative AI model on Amazon SageMaker for real-time fraud detection. The model, a fine-tuned Llama 2 7B, must respond to transaction requests within 500 milliseconds. The team has deployed the model using a SageMaker real-time endpoint with a single ml.g5.2xlarge instance. During load testing, the endpoint achieves an average latency of 450 ms at 10 requests per second (RPS), but the latency spikes to over 2 seconds at 20 RPS. The team needs to maintain sub-500 ms latency at up to 50 RPS. The model is too large to fit on a single GPU, so they are using CPU instances. They considered using a larger instance type but want to minimize cost. What should the team do to meet the latency requirement cost-effectively?

A.Upgrade to a single ml.g5.4xlarge instance

B.Attach an Amazon Elastic Inference accelerator to the existing instance

C.Use a SageMaker multi-model endpoint with multiple ml.g5.xlarge instances and auto scaling

D.Use SageMaker Serverless Inference to automatically scale

AnswerC

Distributing load across smaller instances reduces cost and meets latency via scaling.

Why this answer

A SageMaker multi-model endpoint (MME) allows multiple model replicas to be hosted on a fleet of instances, enabling horizontal scaling to handle increased throughput. By using multiple ml.g5.xlarge instances with auto scaling, the team can distribute the 50 RPS load across several instances, keeping per-instance latency low while minimizing cost compared to a single larger instance. This approach also leverages the fact that the model is too large for a single GPU but can be efficiently served on CPU instances with proper load distribution.

Exam trap

The trap here is that candidates assume a larger single instance (Option A) is the simplest solution, but they overlook the cost-efficiency and scalability benefits of horizontal scaling with a multi-model endpoint, which is specifically designed for high-throughput, low-latency inference with models that don't fit on a single GPU.

How to eliminate wrong answers

Option A is wrong because upgrading to a single ml.g5.4xlarge instance provides more vCPUs and memory but does not address the fundamental bottleneck of a single instance handling 50 RPS; latency would still spike due to sequential processing limits. Option B is wrong because Amazon Elastic Inference (EI) accelerators are designed for low-latency GPU-based inference and are not compatible with CPU-only instances; they also cannot help if the model does not fit on a single GPU. Option D is wrong because SageMaker Serverless Inference has a maximum concurrency limit and cold start latency that can exceed 500 ms, making it unsuitable for real-time fraud detection with strict sub-500 ms latency requirements.

Full explanation →

48

MCQeasy

A data scientist is using SageMaker Clarify to analyze a binary classification model for gender bias. The dataset has 80% male and 20% female applicants. The model predicts positive outcomes for 60% of males and 30% of females. Which fairness metric would directly capture this disparity in prediction rates?

A.Equalized odds

B.Disparate impact

C.Accuracy difference

D.Demographic parity

AnswerD

Demographic parity measures whether the proportion of positive predictions is the same across groups; here the difference is 30 percentage points.

Why this answer

Demographic parity requires that the proportion of positive predictions is equal across groups. The difference between 60% and 30% directly measures violation of demographic parity.

Full explanation →

49

MCQeasy

A developer invoked an Amazon Bedrock model and received this output. What does the stopReason field indicate?

A.A content filter blocked the output

B.The input prompt was too long

C.The model reached the maximum token limit set in the request

D.The model reached a natural stopping point

AnswerC

The stopReason 'max_tokens' explicitly indicates the output was truncated due to the token limit.

Why this answer

The `stopReason` field in Amazon Bedrock model responses indicates why the model stopped generating tokens. When set to `end_turn` or `stop_sequence`, it means the model reached a natural stopping point or encountered a user-defined stop sequence. However, if the value is `max_tokens`, it explicitly means the model stopped because it reached the maximum token limit specified in the `max_tokens` request parameter.

Option C correctly identifies this behavior.

Exam trap

The AWS AI Practitioner exam often tests the distinction between `max_tokens` (a user-set limit) and the model's natural completion (`end_turn`), tricking candidates into choosing 'natural stopping point' when the field explicitly indicates a forced truncation.

How to eliminate wrong answers

Option A is wrong because a content filter blocking the output would return a different `stopReason` (e.g., `content_filtered`) or a separate guardrail response, not `max_tokens`. Option B is wrong because an input prompt that is too long would result in a validation error or a `ValidationException` before the model even begins generation, not a `stopReason` field in a successful response. Option D is wrong because a model reaching a natural stopping point (e.g., completing a sentence) would return a `stopReason` of `end_turn` or `stop_sequence`, not `max_tokens`.

Full explanation →

50

MCQhard

A company is using Amazon SageMaker Ground Truth to create labeled datasets for a computer vision model. The dataset contains images of people in public places. The company must comply with data privacy regulations that require explicit consent for using images of individuals. The company has a privacy team that reviews the images and provides consent lists. The ML team suspects that some images in the dataset might include individuals who have not consented. The company wants to ensure that only those images with consent are used for training. What should the company do?

A.Apply a blur filter to all faces in the dataset using Amazon Rekognition before labeling.

B.Use Amazon Rekognition to detect faces in all images and re-label those without consent as invalid.

C.Create an Amazon Simple Workflow Service (SWF) workflow that cross-references image metadata with the consent list, and update the Ground Truth manifest to include only approved images.

D.Use Amazon SageMaker Clarify to detect bias in the training data and exclude images of people.

AnswerC

This creates an automated pipeline to filter approved images based on the consent list, using SWF for workflow orchestration.

Why this answer

It uses Amazon Simple Workflow Service (SWF) to orchestrate a cross-referencing workflow between image metadata and the consent list, then updates the SageMaker Ground Truth manifest to include only approved images. This ensures that only images with explicit consent are used for training, directly addressing the data privacy compliance requirement without altering or mislabeling the data.

Exam trap

The trap here is that candidates may confuse privacy compliance with data anonymization (blurring faces) or bias detection, rather than recognizing that explicit consent requires a cross-referencing workflow against an external consent list, which is best orchestrated by a workflow service like SWF.

How to eliminate wrong answers

Option A is wrong because applying a blur filter to all faces using Amazon Rekognition does not remove images of individuals without consent; it only obscures faces, which may still violate privacy regulations if the image itself is used without consent. Option B is wrong because using Amazon Rekognition to detect faces and re-label images as invalid does not cross-reference a consent list; it only marks images based on face detection, not on actual consent status, and could incorrectly exclude or include images. Option D is wrong because Amazon SageMaker Clarify is designed to detect bias in training data and model predictions, not to manage consent compliance or exclude images based on privacy consent lists.

Full explanation →

51

MCQeasy

According to AWS's responsible AI principles, which principle focuses on the idea that AI systems should produce consistent and reliable results even under unexpected conditions?

A.Safety

B.Veracity

C.Fairness

D.Robustness

AnswerD

Robustness ensures consistent performance under varying conditions.

Why this answer

Robustness refers to an AI system's ability to handle unexpected inputs and maintain performance, ensuring reliability.

Full explanation →

52

MCQmedium

A data science team is using SHAP values to explain a complex model. They notice that for a particular prediction, the SHAP value for feature 'age' is +0.3. What does this indicate?

A.The age feature is the most important feature globally

B.The age feature has a negative impact on the prediction

C.The age feature is causing bias in the model

D.The age feature increased the prediction by 0.3 units from the baseline

AnswerD

SHAP values represent additive feature contributions to the model output.

Why this answer

SHAP values show the contribution of each feature to the prediction, measured in the output space. A positive SHAP value increases the prediction from the baseline.

Full explanation →

53

MCQmedium

A developer is using Amazon Bedrock Agents to create an agent that can book meetings by interacting with a calendar API. They have defined an action group with an OpenAPI schema. What is required to execute the API call when the agent decides to use it?

A.The API must be exposed through Amazon API Gateway

B.A Lambda function must be associated with the action group to handle the API call

C.The agent must be trained on the API documentation

D.The agent can directly call the API if the schema is provided

AnswerB

Lambda functions are the compute backend for action groups.

Why this answer

For agents to execute API calls, they need a Lambda function that implements the API integration. The schema defines the interface, but the Lambda provides the logic.

Full explanation →

54

Multi-Selectmedium

Which TWO AWS services can be used to build a chatbot that responds to customer inquiries using a company's documentation as source? (Select two.)

Select 2 answers

A.Amazon Bedrock with RAG

B.Amazon Polly

C.Amazon Q Business

D.Amazon Transcribe

E.Amazon Lex

AnswersA, C

Bedrock with RAG can retrieve from documentation and generate answers using foundation models.

Why this answer

Amazon Bedrock with RAG (Retrieval-Augmented Generation) enables a chatbot to retrieve relevant chunks from a company's documentation and use them as context for a foundation model to generate accurate, grounded responses. This approach directly addresses the need to answer customer inquiries using proprietary or domain-specific source material.

Exam trap

AWS often tests the distinction between services that provide conversational interfaces (like Lex) versus those that enable retrieval-augmented generation from custom data sources (like Bedrock with RAG or Q Business), leading candidates to mistakenly select Lex because it is a chatbot service, even though it lacks native document retrieval capabilities.

Full explanation →

55

MCQmedium

A team is deploying a regression model for loan approval. To ensure transparency for regulators, they need to explain individual predictions. Which interpretability method can provide local explanations by approximating the model with a simpler surrogate?

A.SHAP values

B.Partial dependence plots

C.LIME

D.Permutation feature importance

AnswerC

LIME creates local surrogate models to explain individual predictions.

Why this answer

LIME (Local Interpretable Model-agnostic Explanations) is the correct choice because it generates local explanations by fitting a simpler, interpretable surrogate model (e.g., linear regression or decision tree) around a single prediction. This allows the team to explain why a specific loan application was approved or rejected, meeting regulatory transparency requirements without needing access to the original model's internals.

Exam trap

The trap here is that candidates confuse SHAP values (which also provide local explanations) with LIME, but SHAP does not use a simpler surrogate model—it directly computes feature attributions from the original model, which is a key distinction the exam tests.

How to eliminate wrong answers

Option A is wrong because SHAP values provide local explanations based on cooperative game theory (Shapley values) but do not approximate the model with a simpler surrogate; instead, they compute additive feature contributions directly from the original model. Option B is wrong because partial dependence plots show the average marginal effect of a feature on the model's predictions across the entire dataset, not local explanations for individual predictions. Option D is wrong because permutation feature importance measures the global drop in model performance when a feature is shuffled, offering no local or surrogate-based interpretability for a single prediction.

Full explanation →

56

Multi-Selecthard

Which TWO factors should be considered when choosing between a CPU-based instance and a GPU-based instance for training a machine learning model on Amazon SageMaker? (Choose two.)

Select 2 answers

A.The number of layers in the model

B.The AWS Region

C.The size of the dataset

D.The choice of hyperparameter optimizer

E.The type of model architecture (e.g., CNN vs. linear regression)

AnswersC, E

Large datasets can leverage GPU parallelism.

Why this answer

The size of the dataset directly impacts whether a GPU's parallel processing capabilities are beneficial. GPU instances excel at performing many matrix operations simultaneously, which is critical for large datasets where mini-batch gradient descent can be parallelized. For smaller datasets, the overhead of transferring data to GPU memory may negate the performance gains, making CPU instances more cost-effective.

Exam trap

The AIF-C01 exam often tests the misconception that model architecture alone (e.g., number of layers) dictates hardware choice, when in fact the dataset size and model type (e.g., CNN vs. linear regression) are the key factors that determine whether GPU parallelism provides a meaningful advantage.

Full explanation →

57

MCQeasy

A company is using Amazon Bedrock to generate code snippets. Developers report that the generated code sometimes contains security vulnerabilities. Which action should the team take to mitigate this risk?

A.Deploy the model in a sandbox environment to limit its access to sensitive systems.

B.Implement a manual code review process after generation.

C.Add a system prompt that instructs the model to follow security best practices and avoid known vulnerabilities.

D.Reduce the temperature parameter to 0 to make the output deterministic.

AnswerC

A system prompt sets expectations and can reduce the likelihood of insecure code generation.

Why this answer

Adding a system prompt that instructs the model to follow security best practices and avoid known vulnerabilities directly influences the model's output at inference time. Amazon Bedrock supports system prompts that act as high-level instructions to guide the foundation model's behavior, making this a proactive, scalable mitigation that does not require manual intervention or architectural changes.

Exam trap

AWS often tests the misconception that reducing temperature or isolating the environment can fix output quality issues, when in fact only prompt-level guidance directly addresses the model's generation behavior.

How to eliminate wrong answers

Option A is wrong because deploying the model in a sandbox environment limits access to sensitive systems but does not prevent the model from generating code with security vulnerabilities; the model's output itself remains unchanged. Option B is wrong because implementing a manual code review process after generation is a reactive measure that does not reduce the risk at the source; it adds human overhead and delays, and is not a mitigation that addresses the model's tendency to produce insecure code. Option D is wrong because reducing the temperature parameter to 0 makes the output deterministic but does not teach or enforce security best practices; it only reduces randomness, not the likelihood of generating vulnerable patterns.

Full explanation →

58

MCQmedium

A company is training a large language model using Amazon SageMaker. The training job fails with the error 'OutOfMemory'. They are using a single ml.p3.2xlarge instance. The dataset is 50GB and the model is 2GB. The training script uses standard data loading. Which action should they take to resolve the issue?

A.Increase the instance type to ml.p3.16xlarge

B.Train the model using Spot instances

C.Reduce the batch size

D.Use SageMaker's Pipe mode for data loading

AnswerA

The error indicates the instance memory is insufficient. Upgrading to a larger instance directly addresses the out-of-memory issue.

Why this answer

The error 'OutOfMemory' indicates that the ml.p3.2xlarge instance (with 16 GB GPU memory) cannot hold both the 2 GB model and the 50 GB dataset during training. Increasing the instance type to ml.p3.16xlarge provides 64 GB GPU memory, which is sufficient to accommodate the model and dataset without memory pressure. This directly resolves the resource constraint.

Exam trap

The AIF-C01 exam often tests the misconception that reducing batch size or using Pipe mode can solve out-of-memory errors caused by insufficient GPU memory, when the real fix is to use a larger instance with more GPU memory.

How to eliminate wrong answers

Option B is wrong because Spot instances provide cost savings but do not increase memory capacity; they use the same instance types and would still run out of memory. Option C is wrong because reducing the batch size reduces memory usage per step but does not address the fundamental issue that the total dataset (50 GB) cannot fit into the 16 GB GPU memory of the current instance; the model alone is 2 GB, leaving insufficient room for data. Option D is wrong because SageMaker's Pipe mode streams data directly from Amazon S3 to the training algorithm without storing it on disk, but the GPU memory is still required to hold the model and the data batches during processing; Pipe mode does not reduce GPU memory consumption.

Full explanation →

59

MCQeasy

A developer needs to evaluate the quality of a text summarization model by comparing its output to reference summaries. Which automated metric measures the overlap of n‑grams between the generated and reference summaries?

A.ROUGE

B.BERTScore

C.METEOR

D.BLEU

AnswerA

ROUGE (Recall‑Oriented Understudy for Gisting Evaluation) measures n‑gram overlap, ideal for summarization.

Why this answer

ROUGE measures n‑gram overlap and is commonly used for summarization. BLEU is for translation, BERTScore uses embeddings, and METEOR accounts for synonyms — but the question specifically asks about n‑gram overlap.

Full explanation →

60

MCQhard

A machine learning team uses SageMaker Clarify to evaluate a model for bias. The dataset includes a feature 'ZipCode' that correlates strongly with income and race. The team is concerned about proxy discrimination. What is the MOST effective way to address this in the context of responsible AI?

A.Remove the ZipCode feature from the dataset

B.Replace ZipCode with geographic region at a higher level

C.Disguise ZipCode by hashing it before training

D.Use SageMaker Clarify to measure bias of the model's predictions with respect to protected attributes, and apply post-processing mitigation

AnswerD

Measuring bias on protected attributes (even if not used as features) reveals proxy discrimination; post-processing can adjust decisions to meet fairness criteria.

Why this answer

Proxy discrimination occurs when a seemingly neutral feature correlates with protected attributes. The best practice is to detect and mitigate bias without removing valuable predictive features, as removing ZipCode may still leave correlated proxies. SageMaker Clarify can compute bias metrics on the model's predictions with respect to race or income to detect proxy discrimination.

Full explanation →

61

MCQeasy

A company wants to use a foundation model to automatically moderate user-generated content. The model must filter out inappropriate content with high accuracy. Which Amazon service is best suited for this task?

A.Amazon Translate

B.Amazon Rekognition

C.Amazon Polly

D.Amazon Comprehend

AnswerD

Comprehend offers content moderation features.

Why this answer

Amazon Comprehend is the correct choice because it is a natural language processing (NLP) service that can analyze text for sentiment, key phrases, and — critically — toxicity and inappropriate content using built-in or custom classifiers. This directly matches the requirement to moderate user-generated text with high accuracy, as it can detect hate speech, profanity, and other harmful language.

Exam trap

The trap here is that candidates may confuse Amazon Rekognition's ability to detect unsafe content in images with the need to moderate text, leading them to select Rekognition instead of recognizing that Comprehend is the NLP service for text analysis.

How to eliminate wrong answers

Option A is wrong because Amazon Translate is a machine translation service that converts text between languages; it has no capability to analyze or moderate content for appropriateness. Option B is wrong because Amazon Rekognition is designed for image and video analysis (e.g., object detection, facial recognition, unsafe content detection in visual media), not for moderating text-based user-generated content. Option C is wrong because Amazon Polly is a text-to-speech service that converts written text into lifelike speech; it performs no content moderation or analysis.

Full explanation →

62

MCQeasy

A startup needs to build a real-time text translation feature for a customer chat application. Latency must be under 200 ms per request. Which AWS approach is BEST suited?

A.Use Amazon Comprehend for language detection and a custom translation model

B.Use Amazon Bedrock with a multilingual foundation model

C.Use Amazon Translate with real-time translation

D.Use Amazon Transcribe and then Amazon Bedrock

AnswerC

Amazon Translate is a purpose-built service for translation with low latency.

Why this answer

Amazon Translate's real-time translation API is purpose-built for low-latency text translation, typically achieving sub-200 ms response times for small payloads. It directly translates text without the overhead of running a large foundation model or performing intermediate steps like transcription, making it the best fit for this latency-sensitive chat application.

Exam trap

The trap here is that candidates may assume a large foundation model (e.g., via Bedrock) is always the best choice for multilingual tasks, overlooking that purpose-built services like Amazon Translate are specifically optimized for low-latency, high-throughput translation at a fraction of the cost and complexity.

How to eliminate wrong answers

Option A is wrong because Amazon Comprehend is designed for natural language processing (e.g., sentiment analysis, entity extraction), not real-time translation, and building a custom translation model would introduce significant latency and complexity. Option B is wrong because Amazon Bedrock with a multilingual foundation model introduces inference latency that often exceeds 200 ms for real-time requests, and it is not optimized for the single-purpose, high-throughput translation task required here. Option D is wrong because Amazon Transcribe is for speech-to-text, not text translation, and chaining it with Bedrock adds unnecessary latency and complexity for a text-only translation feature.

Full explanation →

63

MCQmedium

A developer is using Amazon Bedrock Agents to build a multi-step reasoning workflow. The agent needs to query an external REST API to fetch data. What must the developer define in the agent configuration?

A.A prompt template with the API endpoint URL

B.A knowledge base with the API schema

C.An action group with the API schema and a Lambda function

D.A guardrail to filter API responses

AnswerC

Correct. Action groups enable agents to call external services via Lambda.

Why this answer

Action groups allow agents to invoke external APIs (via AWS Lambda) or knowledge bases. The developer must define an action group that describes the API operations the agent can call, along with the Lambda function that implements the API integration.

Full explanation →

64

Multi-Selecthard

A financial services company is deploying a machine learning model that must comply with SOC 2 and PCI DSS. They need to ensure that the model artifacts and training data are encrypted, access is audited, and the environment is protected from network threats. Which THREE AWS services should they implement?

Select 3 answers

A.Amazon DynamoDB Accelerator (DAX)

B.Amazon GuardDuty

C.AWS CloudTrail

D.AWS KMS

E.AWS WAF

AnswersB, C, D

GuardDuty continuously monitors for malicious activity and network threats.

Why this answer

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior, which helps protect the environment from network threats as required by SOC 2 and PCI DSS. By analyzing VPC Flow Logs, DNS logs, and CloudTrail events, it can detect anomalies such as port scanning or data exfiltration, directly addressing the need for network threat protection in a compliant ML deployment.

Exam trap

AWS often tests the distinction between network threat detection (GuardDuty) and web application layer protection (WAF), leading candidates to incorrectly choose WAF for general network threat protection when it only addresses HTTP/S-based attacks.

Full explanation →

65

MCQhard

A company has trained a model using Amazon SageMaker and stored the model artifacts in S3 with SSE-KMS encryption. The development team wants to grant cross-account access to the model artifacts so a partner can deploy the model in their own account. Which steps are required?

A.Create a new IAM role in the partner account with S3 read permissions

B.Create an S3 bucket policy allowing the partner account to read the objects, and ensure the KMS key policy allows the partner account to use the key

C.Use AWS Lake Formation to share the data

D.Copy the model artifacts to a public S3 bucket

AnswerB

Both S3 bucket policy and KMS key policy must grant cross-account access.

Why this answer

To share SSE-KMS encrypted objects cross-account, you must grant the partner account access to both the S3 object (via bucket policy) and the KMS key (via key policy). The partner must also have the correct IAM permissions.

Full explanation →

66

Multi-Selectmedium

A company is building a chatbot using Amazon Bedrock. They want to ensure the model's responses are grounded in company-specific data and that harmful content is filtered out. Which two services or features should they use? (Choose TWO.)

Select 2 answers

A.Amazon Kendra

B.Bedrock Agents

C.Amazon Comprehend

D.Bedrock Guardrails

E.Amazon SageMaker JumpStart

AnswersA, D

Correct: Amazon Kendra can be used as a knowledge base for RAG to ground responses in company data.

Why this answer

Amazon Kendra is correct because it provides a managed search service that indexes company-specific data sources, enabling the Bedrock chatbot to retrieve relevant documents and ground its responses in authoritative information. Bedrock Guardrails is correct because it allows you to define content filters and topic policies to block harmful or undesirable outputs, ensuring the chatbot adheres to safety and compliance requirements.

Exam trap

AWS often tests the distinction between services that provide grounding (Kendra) versus those that orchestrate actions (Agents), and between content filtering (Guardrails) versus general NLP (Comprehend), leading candidates to confuse the roles of Bedrock Agents and Amazon Comprehend.

Full explanation →

67

Multi-Selecteasy

A data scientist wants to deploy a custom model built with TensorFlow to Amazon SageMaker for real-time inference. Which TWO steps are required? (Choose two.)

Select 2 answers

A.Create an Amazon ECR repository for the inference container

B.Upload the model artifacts to an S3 bucket

C.Submit a training job to SageMaker

D.Create a SageMaker endpoint configuration

E.Convert the model to ONNX format

AnswersB, D

Model artifacts must be stored in S3 for SageMaker to access.

Why this answer

SageMaker requires model artifacts (the trained model files) to be stored in an S3 bucket before they can be used for inference. When deploying a custom TensorFlow model, you must upload the saved model (e.g., in SavedModel format) to S3, and then SageMaker will download it to the inference container during endpoint creation.

Exam trap

The trap here is that candidates often think they must build a custom container (Option A) or convert the model (Option E), but SageMaker's pre-built TensorFlow containers eliminate those steps, and the key requirements are simply uploading artifacts to S3 and creating the endpoint configuration.

Full explanation →

68

MCQmedium

A developer is using the Amazon Bedrock InvokeModel API with the above request to summarize meeting notes. The response is a single word repeated many times. Which parameter is MOST likely causing this issue?

A.topP set to 0.9

B.stopSequences is empty

C.maxTokenCount set to 100

D.temperature set to 0

AnswerD

Temperature 0 makes output deterministic and prone to repetition.

Why this answer

A temperature of 0 forces the model to always select the highest-probability token at each step, which can lead to repetitive loops if the most likely token repeatedly points back to itself (e.g., the same word). This deterministic behavior eliminates randomness, causing the model to get stuck in a single-word cycle rather than generating diverse or coherent text.

Exam trap

AWS often tests the misconception that temperature only affects 'creativity' or 'randomness,' when in fact a temperature of 0 causes deterministic argmax selection, which can paradoxically produce repetitive or stuck outputs rather than simply 'less creative' text.

How to eliminate wrong answers

Option A is wrong because topP set to 0.9 (nucleus sampling) actually increases diversity by considering tokens whose cumulative probability reaches 0.9, which would reduce repetition, not cause it. Option B is wrong because an empty stopSequences list means no custom stopping conditions are applied, but this does not force repetition; the model would still generate until a natural stop (e.g., EOS token) or maxTokenCount is reached. Option C is wrong because maxTokenCount set to 100 only limits the total number of tokens generated; it does not influence token selection probability or cause a single word to repeat—it would simply stop after 100 tokens regardless of content.

Full explanation →

69

MCQhard

A data scientist runs the SageMaker Clarify job shown in the exhibit for a credit risk model. After reviewing the results, they find a high bias metric for the gender facet. Which action is most consistent with responsible AI?

A.Proceed with deployment because the model is already in production

B.Remove the gender attribute from the training data and retrain

C.Investigate the root cause and retrain with balanced data

D.Increase the acceptance threshold for the model

AnswerC

Root cause analysis and retraining address bias.

Why this answer

Responsible AI requires understanding and mitigating bias at its source, not just masking it. Investigating the root cause (e.g., data collection bias, labeling bias, or proxy features) and retraining with balanced data directly addresses the high bias metric detected by SageMaker Clarify, aligning with AWS's principle of fairness. Simply removing the gender attribute may not eliminate bias if other features act as proxies, and increasing the threshold does not fix the underlying model bias.

Exam trap

The AIF-C01 exam often tests the misconception that simply removing a sensitive attribute (like gender) is sufficient to eliminate bias, but the trap here is that proxy features can still encode the same bias, making root-cause investigation and balanced retraining the only responsible action.

How to eliminate wrong answers

Option A is wrong because deploying a model with a known high bias metric violates responsible AI principles and could lead to unfair outcomes, even if the model is already in production; SageMaker Clarify is designed to detect such issues before or during deployment. Option B is wrong because removing the gender attribute alone does not guarantee bias removal—other features like zip code or income can act as proxies for gender, and the model may still learn biased correlations. Option D is wrong because increasing the acceptance threshold (e.g., for a binary classifier) only changes the decision boundary, not the underlying biased patterns learned by the model; it does not reduce the bias metric reported by Clarify.

Full explanation →

70

MCQeasy

A startup wants to build a product recommendation engine for their e-commerce platform. They have user purchase history and item metadata. They want a fully managed solution that can automatically train and deploy a recommendation model without needing to manage the underlying ML lifecycle. The solution should provide personalized recommendations based on collaborative filtering. Which AWS service should they use?

A.Use Amazon Kendra

B.Use Amazon Lex

C.Use Amazon Personalize

D.Use Amazon SageMaker built-in Factorization Machines algorithm

AnswerC

Personalize is fully managed and specifically designed for recommendation systems.

Why this answer

Amazon Personalize is a fully managed service that enables you to build and deploy recommendation models without managing the underlying ML lifecycle. It supports collaborative filtering out of the box, using user purchase history and item metadata to generate personalized recommendations, which directly matches the startup's requirements.

Exam trap

The trap here is that candidates may confuse Amazon SageMaker's built-in algorithms (like Factorization Machines) with a fully managed recommendation service, overlooking the requirement for automatic lifecycle management and instead focusing only on the algorithm capability.

How to eliminate wrong answers

Option A is wrong because Amazon Kendra is an intelligent search service that uses natural language processing to answer questions and retrieve documents, not a recommendation engine for collaborative filtering. Option B is wrong because Amazon Lex is a service for building conversational interfaces (chatbots) using speech and text, not for generating product recommendations. Option D is wrong because while Amazon SageMaker's built-in Factorization Machines algorithm can perform collaborative filtering, it requires you to manage the ML lifecycle (data preparation, training, deployment, scaling), which contradicts the requirement for a fully managed solution that automatically handles these tasks.

Full explanation →

71

Multi-Selectmedium

A financial institution is developing a model to detect fraudulent transactions. They want to ensure the model is robust and does not exhibit bias. Which TWO actions should they take?

Select 2 answers

A.Use Amazon SageMaker Clarify to compute fairness metrics like demographic parity

B.Use a single model for all customers without segmenting by region

C.Deploy the model with a high confidence threshold to reduce false positives

D.Encrypt all transaction data at rest and in transit

E.Collect a balanced training dataset representing all transaction types and customer demographics

AnswersA, E

SageMaker Clarify provides bias metrics to evaluate and monitor fairness.

Why this answer

Representation bias mitigation ensures diverse data, and using fairness metrics helps detect bias. These two actions directly address robustness and bias.

Full explanation →

72

Multi-Selecthard

A data science team is developing a credit scoring model and wants to ensure it meets fairness requirements. They measure the model's disparate impact and find it exceeds the 80% rule (adverse impact ratio >0.8). Which THREE actions should they consider to mitigate this? (Choose three.)

Select 3 answers

A.Apply a reweighing technique to assign higher weights to underrepresented groups in training

B.Remove protected attributes (e.g., gender, race) from the dataset

C.Adjust the decision threshold to increase approval rates for the disadvantaged group

D.Use a bias mitigation algorithm such as adversarial debiasing

E.Collect additional training data that better represents the disadvantaged group

AnswersA, D, E

Reweighing adjusts sample weights to reduce bias against protected groups.

Why this answer

Reweighing, bias mitigation algorithms, and collecting more diverse data are standard techniques to address disparate impact. Removing protected attributes may not eliminate proxy variables, and only adjusting thresholds does not address root causes.

Full explanation →

73

MCQmedium

A social media company deploys a content moderation model. They want to minimize the risk of over-censoring legitimate posts (false positives) while still catching harmful content. Which metric should they prioritize?

A.F1 score

B.Recall

C.Accuracy

D.Precision

AnswerD

Precision focuses on the accuracy of positive predictions, reducing false positives which is the goal.

Why this answer

Precision measures the proportion of positive identifications that are actually correct. High precision means fewer false positives, which aligns with the goal of not over-censoring legitimate posts.

Full explanation →

74

MCQeasy

A data scientist wants to quickly experiment with a pre-trained LLM for text generation without writing any code. Which AWS service is MOST suitable?

A.Amazon Bedrock

B.Amazon EC2

C.Amazon SageMaker JumpStart

D.AWS Lambda

AnswerC

SageMaker JumpStart offers pre-trained models with a simple deployment interface.

Why this answer

Amazon SageMaker JumpStart provides a curated set of pre-trained foundation models (including LLMs) that can be deployed with just a few clicks, requiring no code. This makes it the most suitable service for a data scientist who wants to quickly experiment with a pre-trained LLM for text generation without writing any code.

Exam trap

The trap here is that candidates may confuse Amazon Bedrock's managed API access to foundation models with a no-code solution, but Bedrock still requires code to call the API, whereas SageMaker JumpStart offers a true no-code deployment and testing interface.

How to eliminate wrong answers

Option A is wrong because Amazon Bedrock is a serverless service for building generative AI applications using foundation models via API calls, but it still requires at least minimal code (e.g., SDK or CLI) to invoke the model, not a no-code experiment. Option B is wrong because Amazon EC2 requires manual setup of the OS, environment, and model deployment, which involves significant code and configuration, not a quick no-code experiment. Option D is wrong because AWS Lambda is a serverless compute service for running code in response to events, and it requires writing and deploying code to invoke an LLM, not a no-code solution.

Full explanation →

75

MCQhard

A company uses Amazon Rekognition to detect objects in images. The model is producing a high number of false positives for a specific category. Which action should be taken to improve the model's precision for that category?

A.Use Amazon Rekognition Custom Labels to train a custom model with additional labeled images

B.Increase the confidence threshold to 99%

C.Submit a request to AWS to retrain the base Rekognition model

D.Use Amazon SageMaker to build a new object detection model from scratch

AnswerA

Custom Labels fine-tunes the model on your data, improving precision for specific categories.

Why this answer

Amazon Rekognition Custom Labels allows you to train a custom model using your own labeled dataset, which directly addresses the false positives for a specific category by fine-tuning the model on domain-relevant examples. This improves precision because the base Rekognition model is pre-trained on general data and may not capture the nuances of your specific category, whereas a custom model learns from your labeled images to reduce incorrect detections.

Exam trap

The trap here is that candidates may assume increasing the confidence threshold is a quick fix for false positives, but they overlook that this approach does not improve the model's discriminative ability and can harm recall, whereas Custom Labels directly addresses the root cause by retraining on domain-specific data.

How to eliminate wrong answers

Option B is wrong because simply increasing the confidence threshold to 99% may reduce false positives but also significantly increases false negatives, potentially missing many true detections for that category, and does not address the underlying model's inability to distinguish the category correctly. Option C is wrong because AWS does not provide a mechanism to retrain the base Rekognition model; the base model is a fixed, pre-trained service that cannot be modified per customer request. Option D is wrong because building a new object detection model from scratch using Amazon SageMaker is overkill and unnecessarily complex when Amazon Rekognition Custom Labels already provides a purpose-built, managed solution for customizing object detection with minimal effort.

Full explanation →

Page 1 of 9

All pages

1 2 3 4 5 6 7 8 9

Practice AIF-C01 by domain

Target a specific domain to shore up weak areas.

Applications of Foundation Models Security, Compliance, and Governance for AI Solutions Fundamentals of AI and ML Fundamentals of Generative AI Guidelines for Responsible AI

See all domains with question counts →