Courseiva

AWS Certified AI Practitioner AIF-C01 (AIF-C01) — Questions 151225

619 questions total · 9pages · All types, answers revealed

Page 2

Page 3 of 9

Page 4
151
Multi-Selecteasy

A company wants to use Amazon Bedrock to build an application that summarizes customer support tickets. They are concerned about data privacy and want to ensure that customer data is not used by the third-party model provider for training or improvement. Which TWO actions should they take?

Select 2 answers
A.Store all data in an encrypted S3 bucket
B.Disable model improvement data sharing in Bedrock settings
C.Use a third-party model not listed in Bedrock
D.Use a different foundation model that has a data processing agreement (DPA) in place
E.Enable VPC endpoints for Bedrock
AnswersB, D

This prevents AWS from using your data to improve the model.

Why this answer

AWS does not share data with model providers for training unless you opt in. To be safe, disable model improvement and use a data processing agreement if needed. Using a different model or VPC endpoints does not directly address data usage for training.

152
MCQmedium

An e-commerce company is building a product description generator using Amazon Bedrock. They want to ensure that the generated descriptions do not include any prohibited content (e.g., offensive language or competitor mentions). The company has a list of denied topics and keywords. Which feature should they use?

A.Amazon Comprehend for toxicity detection
B.Bedrock Guardrails with content filters and denied topics
C.Bedrock Knowledge Bases with metadata filtering
D.Bedrock Agents with a custom action group to filter outputs
AnswerB

Guardrails directly supports blocking specific content and topics in model inputs and outputs, exactly as required.

Why this answer

Bedrock Guardrails provides content filters and topic denial that can block specific words, phrases, or entire topics. This is the managed way to enforce content policies on model outputs.

153
Multi-Selecthard

A company uses Amazon SageMaker Pipelines for MLOps. The security team requires that all pipeline steps use only approved Docker images from a private Amazon ECR repository, and that all pipeline artifacts are encrypted with a customer managed KMS key. Which THREE steps must the company configure to meet these requirements? (Choose three.)

Select 3 answers
A.Specify a KMS key in the pipeline definition for encrypting output artifacts.
B.Set an ECR lifecycle policy to delete untagged images older than 30 days.
C.Configure each pipeline step to use an ImageUri that references a Docker image in the private Amazon ECR repository.
D.Enable AWS Config rules to check for public ECR repositories.
E.Assign an IAM role to the pipeline that includes kms:Encrypt and kms:Decrypt permissions for the customer managed KMS key.
AnswersA, C, E

This encrypts artifacts with the customer managed key.

Why this answer

Amazon SageMaker Pipelines allows you to specify a KMS key in the pipeline definition to encrypt output artifacts at rest. This ensures that all artifacts generated by pipeline steps are encrypted using a customer managed KMS key, meeting the security team's encryption requirement.

Exam trap

The AIF-C01 exam often tests the distinction between configuration that directly enforces a requirement (like specifying ImageUri and KMS key) versus monitoring or housekeeping actions (like lifecycle policies or Config rules) that do not enforce the requirement at the pipeline step level.

154
MCQeasy

A company is using Amazon Bedrock to deploy a generative AI application. They want to implement guardrails to prevent the model from generating harmful or offensive content. Which feature of Bedrock Guardrails should they configure?

A.Enable data privacy settings in the model invocation
B.Use prompt engineering to instruct the model to be safe
C.Set up invocation logging to review all outputs
D.Configure denied topics and content filters
AnswerD

Denied topics and content filters directly prevent the model from generating content on specified harmful topics.

Why this answer

Bedrock Guardrails allow you to configure denied topics and content filters (e.g., hate speech, violence) to block harmful outputs. Prompt engineering is separate. Data privacy settings are not for content filtering.

Invocation logging is for monitoring, not blocking.

155
MCQhard

A company uses Amazon SageMaker to host a real-time inference endpoint. The model was trained on sensitive data, and the company wants to ensure that the data sent to the endpoint is encrypted in transit. Additionally, the company wants to restrict access to the endpoint to only traffic originating from a specific VPC. Which configuration meets these requirements?

A.Create the SageMaker endpoint in a VPC, associate a security group that allows inbound HTTPS from the VPC CIDR, and configure the endpoint to use HTTPS
B.Configure the SageMaker endpoint to use mutual TLS (mTLS) with client certificates
C.Place the SageMaker endpoint behind an Amazon CloudFront distribution with an origin access identity
D.Use AWS STS to generate temporary credentials and require the client to sign requests with them
AnswerA

VPC placement restricts network access; HTTPS encrypts data in transit.

Why this answer

Creating the SageMaker endpoint within a VPC and associating a security group that restricts inbound HTTPS traffic to the VPC CIDR ensures that only traffic from within that VPC can reach the endpoint. Configuring the endpoint to use HTTPS encrypts data in transit using TLS, meeting both the encryption and VPC-only access requirements.

Exam trap

The trap here is that candidates may think mTLS or signed requests alone satisfy both encryption and VPC restriction, but they fail to realize that network-level access control (security group with VPC CIDR) is required to restrict traffic to a specific VPC, and HTTPS is needed for encryption in transit.

How to eliminate wrong answers

Option B is wrong because mutual TLS (mTLS) provides two-way authentication between client and server but does not restrict traffic to a specific VPC; it only ensures client certificate validation, not network-level access control. Option C is wrong because placing the endpoint behind CloudFront with an origin access identity restricts access to CloudFront only, but CloudFront itself is a public service and does not limit traffic to a specific VPC; it also does not inherently enforce HTTPS encryption from the client to CloudFront unless explicitly configured. Option D is wrong because using AWS STS to generate temporary credentials and requiring signed requests provides authentication and authorization but does not encrypt data in transit (HTTPS is still needed) and does not restrict traffic to a specific VPC; it only ensures the request is signed, not that it originates from a particular network.

156
MCQeasy

A developer is building an application that translates customer support tickets from English to Spanish using Amazon Bedrock. They need to evaluate the quality of translations. Which automated metric is most appropriate for comparing the model's translations to professional human translations?

A.Accuracy
B.BLEU
C.BERTScore
D.ROUGE
AnswerB

BLEU measures precision of n-grams between generated and reference translations, widely used for translation quality.

Why this answer

BLEU is a standard metric for evaluating machine translation quality by comparing n-gram overlap with reference translations.

157
MCQmedium

A team is training a binary classification model using Amazon SageMaker. They notice that the training accuracy is 99% but the test accuracy is only 70%. Which technique should they apply first to address this?

A.Reduce training data
B.Apply regularization
C.Increase learning rate
D.Increase model complexity
AnswerB

Regularization adds penalty for large weights, helping to reduce overfitting.

Why this answer

The high training accuracy (99%) paired with significantly lower test accuracy (70%) is a classic symptom of overfitting, where the model memorizes the training data instead of learning generalizable patterns. Regularization (Option B) is the first-line technique to combat overfitting by adding a penalty to the loss function (e.g., L1 or L2 regularization), which discourages overly complex decision boundaries. In Amazon SageMaker, this can be implemented via hyperparameters like `l1` or `l2` in built-in algorithms or by adding dropout layers in a custom framework.

Exam trap

AWS often tests the misconception that overfitting is solved by increasing data or model complexity, when in fact the first step should be regularization to penalize overly complex models.

How to eliminate wrong answers

Option A is wrong because reducing training data would worsen overfitting by providing the model with fewer examples to learn from, making it even more prone to memorization. Option C is wrong because increasing the learning rate can cause the model to overshoot optimal weights during training, leading to divergence or poor convergence, but it does not directly address the variance problem of overfitting. Option D is wrong because increasing model complexity (e.g., adding more layers or parameters) would exacerbate overfitting by giving the model more capacity to memorize noise in the training data.

158
MCQhard

A healthcare startup is building a patient inquiry system using Amazon Bedrock. They must ensure the model does not generate responses containing medical advice or unverified treatment suggestions. The compliance team also requires that no personally identifiable information (PII) is output. Which Bedrock feature should the startup configure to meet both requirements?

A.Bedrock Knowledge Bases with a custom chunking strategy
B.Bedrock Guardrails with topic denial and PII detection
C.Amazon Comprehend for PII detection and a separate content moderation service
D.Bedrock Agents with a Lambda function that validates responses
AnswerB

Guardrails directly supports denying topics (e.g., medical advice) and detecting/redacting PII in both input and output, exactly meeting both requirements.

Why this answer

Bedrock Guardrails provides content filtering, topic denial (to block medical advice), and PII detection/redaction. Topic denial can block entire categories of unwanted responses, and PII detection prevents leakage of personal data.

159
MCQhard

A company uses Amazon Bedrock to generate product descriptions. They notice that the model sometimes produces factually incorrect information. They want to ensure responses are grounded in company-provided documents. Which Bedrock feature should they enable?

A.Topic denial
B.Grounding check
C.Content filtering
D.PII detection
AnswerB

Correct. Grounding check ensures responses are based on provided source documents.

Why this answer

Bedrock Guardrails includes a grounding check that verifies the model's response is supported by the source documents (retrieved from a knowledge base). If the response is not grounded, the guardrail can block it or add a citation. The other options do not enforce factual grounding.

160
MCQeasy

A developer wants to store and search vector embeddings for a RAG application. Which AWS-managed vector store option is serverless and can be used with Amazon Bedrock?

A.Amazon RDS for MySQL
B.Amazon Redshift
C.Amazon DynamoDB
D.Amazon OpenSearch Serverless
AnswerD

OpenSearch Serverless supports vector indexing and is serverless.

Why this answer

Amazon OpenSearch Serverless is a serverless option for vector search. The others are either not serverless or not fully managed by AWS.

161
MCQhard

A company uses an AI system to automate loan approvals. The model uses demographic features and achieves high accuracy, but the company wants to ensure compliance with responsible AI guidelines. Which practice best balances performance and fairness?

A.Use demographic features but with minimal monitoring
B.Use a complex black-box model and rely on post-hoc explanations
C.Remove sensitive attributes and monitor for proxy bias
D.Optimize the model solely for accuracy on historical data
AnswerC

Removing attributes reduces direct bias, monitoring detects proxies.

Why this answer

Removing sensitive attributes (e.g., race, gender) from the training data directly addresses fairness by preventing the model from explicitly using these features. However, simply removing them is insufficient; monitoring for proxy bias (e.g., zip code or income correlating with race) is critical to ensure the model does not inadvertently learn discriminatory patterns through correlated features. This approach balances performance by retaining predictive power from non-sensitive features while actively auditing for fairness violations.

Exam trap

The AIF-C01 exam often tests the misconception that simply removing sensitive attributes from the dataset guarantees fairness, without considering proxy bias or the need for ongoing monitoring.

How to eliminate wrong answers

Option A is wrong because using demographic features with minimal monitoring violates responsible AI guidelines; it risks encoding historical biases and does not mitigate fairness concerns, as even high-accuracy models can be discriminatory. Option B is wrong because relying on a complex black-box model with post-hoc explanations (e.g., SHAP or LIME) does not inherently ensure fairness; post-hoc explanations can be unreliable and do not prevent the model from learning biased correlations from sensitive attributes. Option D is wrong because optimizing solely for accuracy on historical data ignores fairness; historical data often contains systemic biases, and maximizing accuracy can amplify those biases, leading to unfair outcomes for protected groups.

162
MCQhard

A financial services company uses Amazon Bedrock Knowledge Bases to power a Q&A bot for analysts. They notice that the bot sometimes gives outdated information because documents are updated weekly. They cannot retrain or rebuild the knowledge base weekly. What is the MOST efficient solution?

A.Rebuild the entire knowledge base from scratch every week using a scheduled job
B.Use incremental data ingestion to sync only the updated documents weekly
C.Set the chunk size to zero so the entire document is always retrieved
D.Use a Lambda function to manually delete and re‑upload all documents each week
AnswerB

Incremental ingestion updates the vector index with only changed documents, preserving the rest and completing quickly.

Why this answer

Amazon Bedrock Knowledge Bases supports incremental data ingestion, which allows you to sync only the documents that have changed since the last sync. This avoids the need to rebuild the entire knowledge base from scratch, saving time and compute resources while keeping the Q&A bot up to date with weekly document updates.

Exam trap

The trap here is that candidates may assume incremental ingestion is not supported or that a full rebuild is the only reliable method, but Bedrock Knowledge Bases explicitly provides incremental sync as a first-class feature to handle exactly this use case.

How to eliminate wrong answers

Option A is wrong because rebuilding the entire knowledge base from scratch every week is inefficient and unnecessary; it consumes more time and resources than incremental ingestion. Option C is wrong because setting the chunk size to zero is not a valid configuration in Bedrock Knowledge Bases—chunking is a fundamental part of the ingestion process, and a zero chunk size would break the indexing pipeline. Option D is wrong because manually deleting and re-uploading all documents via a Lambda function is essentially a manual rebuild, which is less efficient than using the built-in incremental ingestion feature that only processes changed documents.

163
MCQhard

A financial institution uses Amazon SageMaker to host a model for credit scoring. The model was trained on data that includes demographic attributes. During a routine audit, the compliance team finds that the model produces significantly different approval rates for applicants of different ethnicities, even when credit profiles are similar. The institution must continue using the model but needs to ensure compliance with fair lending laws. What should the company do FIRST?

A.Adjust the decision threshold to equalize approval rates across groups.
B.Run Amazon SageMaker Clarify to analyze the model for bias and generate a bias report.
C.Document the disparity in a compliance report and continue using the model.
D.Replace the model with a simpler explainable model to eliminate bias.
AnswerB

SageMaker Clarify provides bias metrics and explanations, which is the first step in understanding and mitigating bias.

Why this answer

Amazon SageMaker Clarify is the correct first step because it provides built-in bias detection and explainability for machine learning models. Before taking any corrective action, the company must first quantify and understand the nature and extent of the bias using SageMaker Clarify's bias metrics (e.g., Difference in Positive Proportions, Disparate Impact). This diagnostic report is essential for compliance documentation and for determining whether the bias is due to the model, the data, or the threshold, thereby guiding any subsequent remediation steps.

Exam trap

AWS often tests the principle that the first step in addressing bias is always to measure and understand it using a dedicated tool like SageMaker Clarify, rather than jumping to a corrective action like threshold adjustment or model replacement.

How to eliminate wrong answers

Option A is wrong because blindly adjusting the decision threshold to equalize approval rates can introduce new forms of bias, violate fair lending laws by ignoring legitimate risk factors, and does not address the root cause of the bias in the model or data. Option C is wrong because merely documenting the disparity without any analysis or remediation fails to meet regulatory requirements under fair lending laws, which mandate proactive identification and mitigation of discriminatory outcomes. Option D is wrong because replacing the model with a simpler explainable model is a premature and potentially unnecessary action that does not first diagnose the source of bias; a simpler model may still exhibit bias if trained on the same biased data, and the company must first use SageMaker Clarify to understand the bias before deciding on a replacement.

164
MCQmedium

A team is using a prompt engineering technique where they provide a few examples of desired input-output pairs in the prompt to guide the model's response. Which technique are they using?

A.System prompting
B.Zero-shot prompting
C.Few-shot prompting
D.Chain-of-thought prompting
AnswerC

Few-shot prompting provides a few examples to set the pattern for the model.

Why this answer

Few-shot prompting (Option C) is the correct technique because it involves providing a small number of input-output examples within the prompt to condition the model on the desired task format and pattern. This approach helps the model generalize from the examples to produce accurate responses for new inputs, without requiring fine-tuning.

Exam trap

The AWS AI Practitioner exam often tests the distinction between few-shot and zero-shot prompting, where candidates mistakenly think that providing any instruction (like a system prompt) counts as a 'shot,' but the key is the explicit inclusion of input-output pairs as examples.

How to eliminate wrong answers

Option A is wrong because system prompting sets the overall behavior or persona of the model via a system-level instruction, not by providing specific input-output examples. Option B is wrong because zero-shot prompting relies on the model's pre-trained knowledge to perform a task without any examples, which is the opposite of providing few-shot examples. Option D is wrong because chain-of-thought prompting guides the model to produce intermediate reasoning steps, not by giving multiple input-output pairs, but by encouraging step-by-step thinking.

165
MCQmedium

A company wants to use Amazon SageMaker to train a model using a custom Docker container that has specific dependencies. The training code is stored in an S3 bucket. Which steps must be taken to run the training job?

A.Install dependencies via SageMaker's lifecycle configuration instead of a custom container
B.Push the custom container to Amazon ECR and create a training job with the container URI
C.Use SageMaker's built-in framework container and override the entry point
D.Upload the container to S3 and reference it in the training job
AnswerB

ECR is the correct registry for Docker images used in SageMaker.

Why this answer

Amazon SageMaker requires custom Docker containers to be stored in Amazon Elastic Container Registry (ECR) to run training jobs. The container URI from ECR is specified in the `AlgorithmSpecification` parameter of the `CreateTrainingJob` API call, allowing SageMaker to pull and execute the container with the training code from S3. Option B correctly describes this mandatory workflow.

Exam trap

AWS often tests the misconception that any S3-uploaded artifact (including Docker images) can be directly referenced in a training job, but SageMaker strictly requires container images to be stored in ECR, not S3.

How to eliminate wrong answers

Option A is wrong because lifecycle configurations are used to customize notebook instances (e.g., install packages on Jupyter kernels), not to provide dependencies for training jobs; training jobs run in ephemeral containers that do not use lifecycle configurations. Option C is wrong because overriding the entry point of a built-in framework container only works if the container already includes the required dependencies; if custom dependencies are needed, a custom container must be built and pushed to ECR. Option D is wrong because SageMaker does not accept Docker containers stored in S3; containers must be registered in ECR and referenced by their URI.

166
MCQhard

A security analyst is reviewing CloudTrail logs for SageMaker API calls to identify which user executed a particular training job. The logs show assumed roles. In which CloudTrail event field can the analyst find the name of the user who assumed the role?

A.userIdentity.arn
B.eventName
C.requestParameters
D.userIdentity.sessionContext.sessionIssuer.userName
AnswerD

This field contains the username of the IAM user who assumed the role.

Why this answer

When a user assumes an IAM role to perform SageMaker actions, the CloudTrail log records the assumed role's ARN in the `userIdentity.arn` field, but the original user's identity is preserved in the `userIdentity.sessionContext.sessionIssuer.userName` field. This field contains the name of the IAM user or role that initiated the `sts:AssumeRole` call, allowing the analyst to trace back to the actual user who assumed the role.

Exam trap

The trap here is that candidates see `userIdentity.arn` and assume it shows the original user, but it actually shows the ARN of the assumed role, while the original user is nested deeper in `sessionContext.sessionIssuer.userName`.

How to eliminate wrong answers

Option A is wrong because `userIdentity.arn` contains the ARN of the assumed role (e.g., `arn:aws:sts::123456789012:assumed-role/SageMakerExecutionRole/session`), not the original user who assumed it. Option B is wrong because `eventName` records the API action (e.g., `CreateTrainingJob`), not the identity of the user. Option C is wrong because `requestParameters` contains the input parameters of the API call (e.g., training job configuration), not user identity information.

167
Multi-Selectmedium

A data scientist is evaluating different AWS services for building a machine learning pipeline. Which THREE components are part of Amazon SageMaker? (Select THREE.)

Select 3 answers
A.AWS Glue
B.Notebook instances
C.Ground Truth
D.Model registry
E.Amazon Athena
AnswersB, C, D

SageMaker Notebook Instances are fully managed Jupyter notebooks.

Why this answer

Amazon SageMaker provides fully managed notebook instances that allow data scientists to spin up Jupyter notebooks for data exploration, preprocessing, and model development without managing underlying infrastructure. These instances come pre-installed with common ML frameworks and can be easily scaled.

Exam trap

The trap here is that candidates often confuse AWS Glue (a separate ETL service) as part of SageMaker because both are used in ML pipelines, but Glue is not a SageMaker component.

168
MCQeasy

A company is using Amazon Comprehend for sentiment analysis on customer reviews. They notice that the sentiment is often incorrect for negative reviews with sarcasm. What is the likely cause?

A.The model is not fine-tuned for the domain
B.The pre-trained model cannot handle sarcasm well
C.Insufficient training data
D.The input text is too long
AnswerB

Sarcasm detection is a known limitation of general-purpose sentiment analysis models.

Why this answer

Amazon Comprehend's pre-trained sentiment analysis models are trained on general text corpora and lack the ability to detect sarcasm, which relies on contextual cues, tone, and figurative language. Sarcasm often inverts the literal sentiment (e.g., 'Great job, as always' for a failure), and standard NLP models without explicit sarcasm detection or fine-tuning cannot reliably interpret this inversion. Therefore, the likely cause is that the pre-trained model cannot handle sarcasm well.

Exam trap

The AIF-C01 exam often tests the misconception that 'fine-tuning' or 'more data' can fix any NLP issue, but here the trap is that sarcasm is a distinct linguistic challenge that pre-trained models inherently fail at, regardless of domain or data volume, unless specifically addressed with sarcasm-aware training or custom classifiers.

How to eliminate wrong answers

Option A is wrong because while fine-tuning can improve domain-specific accuracy, the core issue here is not domain mismatch but the model's inherent inability to detect sarcasm—a linguistic phenomenon that even domain-tuned models struggle with unless specifically trained on sarcastic examples. Option C is wrong because insufficient training data is not the primary cause; Amazon Comprehend's pre-trained model is trained on vast datasets, but sarcasm detection requires specialized training data and architectures (e.g., contrastive learning) that the base model lacks. Option D is wrong because input text length is not the issue; Comprehend handles up to 5,000 UTF-8 characters per request, and sarcasm is a semantic problem, not a truncation or length-related one.

169
Multi-Selecthard

A marketing team is using a foundation model to generate marketing copy. Which THREE of the following should they consider to ensure responsible and cost-effective use?

Select 3 answers
A.Bias mitigation to avoid unfair stereotypes
B.Cost per token for the model
C.Model size (number of parameters)
D.Toxicity detection in generated content
E.Latency of model inference
AnswersA, B, D

Reduces risk of biased messaging that can harm brand reputation.

Why this answer

Bias mitigation is essential for responsible AI use; foundation models can perpetuate harmful stereotypes if not carefully monitored, and the marketing team must ensure their generated copy does not unfairly target or misrepresent any group. This aligns with AWS's responsible AI principles, including fairness and avoiding bias in model outputs.

Exam trap

AWS often tests the misconception that model size (parameters) is a key cost driver, but in practice, cost is tied to token consumption and inference infrastructure, not just parameter count, and latency is a performance metric, not a cost or responsibility factor.

170
MCQmedium

A company is using a foundation model on Amazon Bedrock to generate customer support responses. They notice that the model sometimes produces harmful or offensive content. Which approach is MOST effective to mitigate this issue?

A.Use prompt engineering to instruct the model to avoid harmful content
B.Enable model invocation logging to review and block responses
C.Fine-tune the model on a curated dataset of safe responses
D.Configure Amazon Bedrock Guardrails with content filters
AnswerD

Guardrails provide configurable filters that block harmful content at inference time.

Why this answer

Amazon Bedrock Guardrails provides configurable content filters that can block harmful, offensive, or inappropriate content in both user inputs and model outputs. This is the most effective approach because it operates at the inference layer, applying safety policies consistently across all requests without requiring model retraining or manual review. Prompt engineering alone is unreliable, and fine-tuning may not generalize to all harmful content patterns.

Exam trap

The AIF-C01 exam often tests the misconception that prompt engineering or fine-tuning alone is sufficient for safety, when in fact a dedicated guardrail mechanism is required for reliable, policy-based content filtering at inference time.

How to eliminate wrong answers

Option A is wrong because prompt engineering can be easily bypassed by adversarial inputs or model drift, and it does not provide deterministic enforcement of safety policies. Option B is wrong because model invocation logging only records responses for auditing; it does not block harmful content in real time. Option C is wrong because fine-tuning on a curated dataset of safe responses reduces but does not eliminate the risk of generating harmful content, especially for edge cases or novel inputs not seen during training.

171
Multi-Selectmedium

A company is developing a generative AI application for content creation. They want to ensure transparency as per responsible AI guidelines. Which THREE practices should they implement? (Choose three.)

Select 3 answers
A.Encourage users to trust the AI outputs without question
B.Label AI-generated content with a clear disclosure
C.Provide a disclaimer about the model's capabilities and limitations
D.Monitor the model for bias in production
E.Document the training data sources and potential biases
AnswersB, C, E

Disclosing AI-generated output is a key transparency requirement.

Why this answer

Transparency involves disclosing AI-generated content, providing disclaimers about capabilities, and documenting model limitations. Monitoring bias is important but separate from transparency; encouraging user trust without disclosure is misleading.

172
Multi-Selecthard

A company is building a generative AI application to answer questions from a large set of technical manuals. Which TWO services or features can be used together in a RAG architecture on AWS? (Choose TWO.)

Select 2 answers
A.Amazon SageMaker
B.Amazon OpenSearch Serverless
C.AWS Lambda
D.Amazon Bedrock Knowledge Bases
E.Amazon Bedrock Guardrails
AnswersB, D

OpenSearch Serverless serves as the vector database for storing embeddings.

Why this answer

A RAG architecture requires a knowledge base for indexing documents and a vector store for storing embeddings. Bedrock Knowledge Bases can use OpenSearch Serverless as a vector store. SageMaker is for training, not retrieval.

Guardrails are safety layers. Lambda is for action groups, not core RAG components.

173
MCQmedium

An organization wants to detect anomalies in real-time streaming data from IoT devices. The data includes sensor readings, and the team plans to use a machine learning model. Which AWS service should be used to build and deploy the model with minimal operational overhead?

A.Amazon SageMaker
B.AWS Glue
C.Amazon QuickSight
D.Amazon Kinesis Data Analytics
AnswerA

SageMaker offers end-to-end ML capabilities and can deploy real-time endpoints.

Why this answer

Amazon SageMaker is the correct choice because it provides a fully managed environment for building, training, and deploying machine learning models at scale. For real-time anomaly detection on streaming IoT data, SageMaker can host a trained model as a real-time endpoint that processes incoming sensor readings via Amazon Kinesis Data Streams or AWS Lambda, minimizing operational overhead by handling infrastructure, scaling, and monitoring automatically.

Exam trap

AWS often tests the misconception that Amazon Kinesis Data Analytics can build and deploy custom ML models, when in fact it only supports built-in ML functions for simple anomaly detection and cannot train or host custom models.

How to eliminate wrong answers

Option B (AWS Glue) is wrong because it is a serverless data integration and ETL service for preparing and transforming batch data, not for building or deploying machine learning models for real-time anomaly detection. Option C (Amazon QuickSight) is wrong because it is a business intelligence (BI) service for visualizing and analyzing data, not for building or deploying ML models. Option D (Amazon Kinesis Data Analytics) is wrong because it is designed for real-time stream processing using SQL or Apache Flink, but it does not provide the capability to build, train, or deploy custom machine learning models; it is limited to built-in ML functions like anomaly detection on simple metrics, not custom model deployment.

174
Multi-Selectmedium

A company is deploying an AI model on Amazon SageMaker and needs to monitor for model drift over time. Which TWO actions should they take? (Choose TWO)

Select 2 answers
A.Use AWS CloudTrail to log all inference requests and responses
B.Enable data capture on the SageMaker endpoint to store real-time inference data in S3
C.Store model artifacts in Amazon ECR and tag each version
D.Set up Amazon CloudWatch anomaly detection on the endpoint invocation count
E.Configure SageMaker Model Monitor to schedule monitoring jobs that compare new data against a baseline
AnswersB, E

Data capture is required to collect the data that Model Monitor will analyze for drift.

Why this answer

SageMaker Model Monitor can detect drift in model quality, data quality, and bias. Capturing inference data is a prerequisite for monitoring. The other options are either unrelated or not directly for drift detection.

175
MCQmedium

A company is developing an LLM-powered application that generates investment advice. They are concerned about the model producing inaccurate or fabricated information. Which combination of techniques should they implement to minimize hallucinations?

A.Fine-tune the LLM on a dataset of correct investment advice
B.Use a larger LLM and rely on its pre-trained knowledge
C.Implement Retrieval-Augmented Generation (RAG) and use Bedrock Guardrails
D.Use a lower temperature setting and increase the max token count
AnswerC

RAG provides factual grounding by retrieving relevant documents; Guardrails can enforce factual consistency and block unverified claims.

Why this answer

RAG grounds the model in retrieved factual documents, and Bedrock Guardrails can filter or block content that contradicts known facts or is speculative. Prompt engineering alone is insufficient. Fine-tuning reduces but does not eliminate hallucinations.

Reducing temperature may reduce creativity but doesn't ground the model.

176
MCQmedium

A company is developing an AI system that screens job applications. To comply with regulatory requirements, they need to provide explanations for each automated decision. Which explainability technique provides global feature importance across the entire dataset?

A.SHAP (SHapley Additive exPlanations)
B.Partial dependence plots
C.LIME (Local Interpretable Model-agnostic Explanations)
D.Permutation feature importance
AnswerA

SHAP can compute global feature importance by averaging absolute Shapley values across all instances, providing a unified measure of feature impact.

Why this answer

SHAP provides both local and global feature importance values based on game theory. It can show the overall impact of each feature across all predictions.

177
Multi-Selectmedium

A company is using Bedrock Agents to automate multi-step workflows that interact with external APIs and databases. They need to ensure the agent can perform actions like querying a database and calling an API. Which TWO components must be defined to enable these capabilities? (Choose TWO)

Select 2 answers
A.A prompt flow to manage multiple prompts
B.Lambda functions that implement the business logic for each action
C.Action groups that describe the APIs and databases
D.Bedrock Guardrails to filter inappropriate actions
E.A Bedrock Knowledge Base to store static documents
AnswersB, C

Lambda functions execute the actual code for each action, such as querying a database.

Why this answer

Action groups define the tools (APIs, databases) the agent can call, and Lambda functions implement the logic. Knowledge Bases are for document retrieval, Guardrails for safety, and prompt flows for prompt management.

178
MCQhard

A company uses Bedrock Guardrails to filter harmful content in a generative AI application. They need to prevent the model from discussing proprietary internal projects. Which Guardrail component should be configured?

A.Topic restrictions
B.Content filters
C.Grounding check
D.Word filters
AnswerA

Topic restrictions allow creating a list of denied topics; the model avoids discussing them.

Why this answer

Topic restrictions allow administrators to define denied topics; the model will not generate responses related to those topics.

179
Multi-Selecteasy

A company uses Amazon Bedrock to build a question-answering system. Which THREE features of Amazon Bedrock can improve answer accuracy? (Choose three.)

Select 3 answers
A.Retrieval Augmented Generation (RAG)
B.Auto-scaling of provisioned throughput
C.Model fine-tuning
D.Encryption at rest
E.Prompt engineering
AnswersA, C, E

RAG retrieves factual information from a knowledge base to improve answer accuracy.

Why this answer

Retrieval Augmented Generation (RAG) improves answer accuracy by retrieving relevant, up-to-date information from external knowledge bases (e.g., Amazon OpenSearch Serverless or Aurora) and providing it as context to the foundation model. This grounds the model's response in factual data, reducing hallucinations and enabling accurate answers without retraining.

Exam trap

AWS often tests the distinction between features that improve accuracy (RAG, fine-tuning, prompt engineering) versus features that improve operational aspects like scalability (auto-scaling) or security (encryption), leading candidates to mistakenly select non-accuracy-related options.

180
MCQmedium

A data scientist is using Amazon SageMaker to train a deep learning model for image classification. The training job is taking too long. The dataset consists of 100,000 images stored in Amazon S3. Which action can the data scientist take to reduce training time without modifying the model architecture?

A.Convert images to CSV format before training.
B.Use a GPU instance type for training.
C.Enable checkpointing to save intermediate models.
D.Reduce the number of training epochs.
AnswerB

GPUs are optimized for parallel matrix operations common in deep learning, significantly reducing training time.

Why this answer

GPU instances are specifically designed for parallel processing of matrix operations, which are fundamental to deep learning training. By switching to a GPU instance type (e.g., p3 or p4d families) in SageMaker, the data scientist can significantly accelerate the training of the image classification model without altering the model architecture, as the dataset of 100,000 images benefits from GPU's massive parallelism for forward and backward passes.

Exam trap

The trap here is that candidates may confuse checkpointing (which helps with recovery, not speed) or reducing epochs (which changes training duration but also model performance) with legitimate performance optimizations, while overlooking that GPU acceleration directly addresses the computational bottleneck without altering the model or dataset.

How to eliminate wrong answers

Option A is wrong because converting images to CSV format would increase data size, lose spatial structure, and introduce unnecessary serialization overhead, making training slower, not faster. Option C is wrong because checkpointing saves intermediate model states for fault tolerance or resumption, but it does not reduce training time; it may even add overhead due to I/O operations. Option D is wrong because reducing the number of training epochs would change the training process and likely degrade model accuracy, which violates the constraint of not modifying the model architecture (epochs are a hyperparameter, not part of architecture, but the question implies no changes that affect training duration by reducing work).

181
Multi-Selecthard

A financial services firm is deploying a generative AI chatbot using Amazon Bedrock. They must ensure that the chatbot does not generate investment advice and that it automatically redacts any personally identifiable information (PII) from user inputs before processing. Which TWO Bedrock features should they use?

Select 2 answers
A.Bedrock Guardrails with topic denial
B.Bedrock Knowledge Bases
C.Bedrock Guardrails with PII detection and redaction
D.Bedrock Studio
E.Bedrock Agents
AnswersA, C

Topic denial can prevent the model from responding to investment advice queries.

Why this answer

Bedrock Guardrails provides content filtering, topic denial, and PII detection/redaction. Topic denial can block investment advice, and PII detection can redact PII from inputs. Knowledge Bases and Agents do not handle input redaction or topic denial natively.

182
MCQmedium

A company uses Amazon Bedrock with a third-party foundation model. They are concerned about the third-party provider accessing their data. What should they review to understand data handling practices?

A.AWS Artifact reports for SOC and PCI compliance
B.AWS CloudTrail logs for model invocation
C.The third-party model provider's data privacy and handling documentation within AWS Bedrock's service description
D.Amazon SageMaker Model Registry metadata
AnswerC

AWS provides documentation on how each provider handles data, including whether data is used for model improvement.

Why this answer

AWS Bedrock's documentation includes data handling and privacy information for each third-party provider. The service agreement and data privacy page explain that AWS does not use customer data to improve models, and what third parties may do.

183
MCQeasy

A hospital uses an AI system to prioritize patients for organ transplant based on predicted survival rates. The system was trained on historical data that includes socioeconomic factors. A review reveals that the system systematically assigns lower priority to patients from lower-income neighborhoods, even when medical urgency is similar. The hospital's ethics board demands an immediate remedy. The data science team is small and must act quickly. What should the hospital do to address this fairness issue most effectively?

A.Discontinue the AI system and have all prioritization done by a human committee
B.Retrain the model with only medically relevant features, after removing socioeconomic factors and correlated proxies
C.Apply a re-weighting penalty to boost priority for low-income patients
D.Use a different model type, such as a random forest instead of gradient boosting, on the same data
AnswerB

Removing biased features addresses the root cause.

Why this answer

The best course is to retrain the model using only medically relevant features, removing socioeconomic factors and correlated proxies. This directly addresses the source of bias. Adding a penalty for low-income patients is artificial and may not reflect medical reality.

Relying solely on human review delays the issue and introduces potential inconsistency. Using a different model without data changes may not eliminate bias.

184
MCQmedium

A data scientist is building a RAG application using Amazon Bedrock Knowledge Bases. The team requires that responses only use information from the uploaded documents and reject queries that are not related to the documents. Which Bedrock feature should be used to enforce this?

A.Bedrock Knowledge Bases
B.Bedrock Agents
C.Bedrock Model Evaluation
D.Bedrock Guardrails
AnswerD

Guardrails can define denied topics and filter out queries that are unrelated to the document scope, ensuring the chatbot stays on-topic.

Why this answer

Bedrock Guardrails can deny topics outside the document scope. Knowledge Bases retrieves data but does not enforce content restrictions. Agents orchestrate actions but do not filter topics.

Model evaluation is for testing, not runtime enforcement.

185
MCQmedium

A company uses Amazon Bedrock Agents to process user requests that involve multiple steps, such as checking inventory and placing an order. The Agent sometimes fails to complete the workflow because it makes incorrect assumptions about the order of steps. What is the MOST effective way to guide the Agent's reasoning?

A.Implement the entire workflow in a single Lambda function and bypass the Agent's reasoning
B.Include explicit step‑by‑step instructions in the Agent's prompt or instruction template
C.Switch to a larger foundation model in the Agent configuration
D.Add more action groups to cover every possible step
AnswerB

Detailed instructions in the Agent's orchestration prompt help the Agent plan the correct sequence of actions.

Why this answer

Amazon Bedrock Agents rely on the instructions provided in the agent's prompt or instruction template to orchestrate multi-step workflows. By explicitly including step-by-step instructions, you guide the agent's reasoning and reduce incorrect assumptions about the order of operations, directly addressing the failure to complete workflows.

Exam trap

The trap here is that candidates often assume that a larger or more powerful foundation model will automatically fix reasoning errors, but the real issue is the lack of explicit guidance in the agent's instructions, which is a prompt engineering problem, not a model capability problem.

How to eliminate wrong answers

Option A is wrong because implementing the entire workflow in a single Lambda function bypasses the agent's reasoning entirely, which defeats the purpose of using Bedrock Agents for dynamic, multi-step processing and removes the ability to leverage foundation model reasoning. Option C is wrong because switching to a larger foundation model does not inherently improve the agent's ability to follow a specific sequence of steps; the issue is about instruction clarity, not model capacity. Option D is wrong because adding more action groups does not correct the agent's reasoning about step order; it only expands the available actions, potentially increasing complexity without addressing the root cause of incorrect sequencing.

186
Multi-Selectmedium

A company is building a chatbot using Amazon Bedrock. They want to provide up-to-date information from a continuously changing database. Which TWO services can be used as a data source for a Bedrock knowledge base? (Select TWO.)

Select 2 answers
A.Amazon Kendra
B.Amazon S3
C.Amazon RDS for MySQL
D.Amazon DynamoDB
E.AWS Glue
AnswersA, B

A Kendra index can be used as a knowledge base source in Bedrock.

Why this answer

Amazon Bedrock knowledge bases can directly ingest data from Amazon S3, which is a supported data source for indexing documents. Amazon Kendra is also a supported data source, allowing Bedrock to leverage existing Kendra indexes for retrieval-augmented generation (RAG). Both services integrate natively with Bedrock knowledge bases to provide up-to-date information from continuously changing data.

Exam trap

AWS often tests the misconception that any AWS database or data processing service can be a direct data source for Bedrock knowledge bases, but only S3, Kendra, and Salesforce are supported.

187
MCQmedium

A data science team is deploying a model using Amazon SageMaker. They need to monitor the model for bias after it is deployed. Which AWS service or feature should they use?

A.Amazon Bedrock Guardrails
B.Amazon SageMaker Clarify
C.Amazon SageMaker Model Monitor
D.AWS CloudTrail
AnswerB

Clarify detects bias in predictions and provides feature importance for deployed models.

Why this answer

Amazon SageMaker Clarify provides bias detection and explainability for ML models, both during training (pre-deployment) and inference (post-deployment).

188
MCQhard

A marketing firm uses Amazon Bedrock to generate ad copy. They notice that the generated text often includes factual inaccuracies about their products. Which technique would most effectively reduce these inaccuracies?

A.Implement Retrieval-Augmented Generation (RAG) with a product knowledge base.
B.Use longer, more detailed prompts.
C.Increase the temperature parameter to 0.9.
D.Fine-tune the model on a dataset of previous ad copies.
AnswerA

RAG enables the model to retrieve and cite authoritative information, reducing hallucinations.

Why this answer

Retrieval-Augmented Generation (RAG) grounds the model's output in a trusted, external knowledge base by retrieving relevant product documents before generating text. This directly addresses factual inaccuracies because the model references authoritative data rather than relying solely on its parametric memory, which may contain outdated or incorrect information.

Exam trap

The AIF-C01 exam often tests the misconception that fine-tuning or prompt engineering alone can fix factual accuracy issues, when in reality RAG is the standard solution for grounding model outputs in external, verifiable data.

How to eliminate wrong answers

Option B is wrong because longer prompts do not fix the underlying knowledge gap; they only provide more context but cannot inject new, accurate facts that the model lacks. Option C is wrong because increasing temperature to 0.9 increases randomness and creativity, which would likely worsen factual inaccuracies by encouraging more hallucinated or divergent outputs. Option D is wrong because fine-tuning on previous ad copies would reinforce existing patterns and biases, including any inaccuracies present in the training data, rather than introducing a reliable source of truth.

189
MCQhard

A company operates a customer support chatbot that uses Amazon Bedrock with a knowledge base sourced from an S3 bucket containing frequently updated product documentation. The knowledge base uses OpenSearch Serverless as the vector store and is configured to sync daily. The chatbot uses the RetrieveAndGenerate API with a custom Lambda function that applies a system prompt instructing the model to base answers solely on the retrieved context. After a major update to the product documentation, the IT team verifies that the data source sync completed successfully and the new chunks are present in the OpenSearch index. However, the chatbot continues to respond with outdated information. Further investigation reveals that the Lambda function includes a response caching mechanism using Amazon ElastiCache for Redis with a Time-To-Live (TTL) of 24 hours. The cache key is based on the user query. The team notes that no cache invalidation is performed after documentation updates. What is the most likely cause of the outdated responses?

A.The ElastiCache cache is returning stale cached responses that contain the old information.
B.The 'maximum results' parameter in the RetrieveAndGenerate API is set to a value too low to retrieve the new chunks.
C.The embedding model used by the knowledge base has not been retrained on the new documentation.
D.The IAM role for the Lambda function lacks permissions to access the new S3 objects.
AnswerA

Correct. The cache is not invalidated on document updates, so identical queries return cached old responses.

Why this answer

Since the data source sync succeeded and the index contains new chunks, the retrieval should be able to access the latest data. However, the Lambda function caches responses keyed by query. With a 24-hour TTL and no invalidation, the cache returns stale responses containing the old safety information.

Clearing the cache or reducing TTL would resolve the issue. The other options are less likely: low max results might cause missing new chunks but would not consistently return old info; the embedding model is not retrained per sync; IAM permissions would affect sync, not retrieval.

190
MCQmedium

A healthcare company uses Amazon SageMaker to train a model on patient data. To meet HIPAA compliance, they must ensure training data is encrypted at rest and in transit. Additionally, the training job should not have internet access. Which combination of actions should the company take?

A.Use AWS Certificate Manager (ACM) to issue a certificate for the training job and enable network isolation
B.Enable SageMaker data capture and use a private VPC with an internet gateway
C.Specify a KMS key for SageMaker's VolumeKmsKeyId and configure the training job to run in a VPC without a public internet route
D.Store training data in an encrypted S3 bucket and use a SageMaker notebook instance inside a VPC
AnswerC

KMS encrypts the EBS volumes at rest; VPC without internet route ensures no internet access.

Why this answer

Using KMS encryption keys and configuring the training job to run in a VPC without a public internet route satisfies both encryption and network isolation requirements.

191
Multi-Selecteasy

A data science team is using Amazon SageMaker to build a model. They want to ensure that only authorized users can deploy models to production. Which TWO methods can they use to enforce this?

Select 2 answers
A.Use SageMaker Model Registry to require approval before deployment.
B.Enable multi-factor authentication (MFA) for all AWS accounts.
C.Use IAM policies to restrict the sagemaker:CreateEndpoint action to specific users.
D.Use AWS CloudTrail to audit deployment actions.
E.Use Amazon GuardDuty to monitor for unauthorized deployment.
AnswersA, C

Model Registry can enforce an approval workflow before a model is deployed.

Why this answer

SageMaker Model Registry allows you to set up an approval workflow for model versions. By requiring explicit approval before a model can be deployed to production, you enforce a governance gate that prevents unauthorized or unverified models from being used in production endpoints.

Exam trap

The trap here is that candidates often confuse auditing or monitoring services (like CloudTrail or GuardDuty) with preventive controls, failing to recognize that only IAM policies and registry approval workflows can actively block unauthorized deployment actions.

192
MCQhard

A company uses Amazon Bedrock with a custom model that was trained on data subject to GDPR. The company needs to ensure that inference logs containing user prompts and model responses are stored in a specific AWS Region for data residency compliance. How should they configure Bedrock model invocation logging?

A.Configure a Bedrock Guardrail to log all invocations to a CloudWatch Logs group in the required region
B.Enable model invocation logging and select an S3 bucket in the required region
C.Use AWS CloudTrail to log all API calls and store them in the required region
D.Use AWS Global Accelerator to route traffic to the required region
AnswerB

This directs logs to a bucket in the desired region, satisfying data residency.

Why this answer

Bedrock model invocation logging allows you to specify the S3 bucket and CloudWatch Logs group where logs are stored. By choosing an S3 bucket in the desired region and enabling CloudWatch Logs in that region, you can meet data residency requirements.

193
Multi-Selecteasy

A company wants to encrypt training data stored in Amazon S3 and model artifacts in Amazon SageMaker using customer-managed keys. Which TWO AWS services or features should they use? (Select TWO.)

Select 2 answers
A.Amazon Macie
B.AWS Certificate Manager (ACM)
C.AWS Key Management Service (KMS)
D.Amazon S3 server-side encryption with KMS
E.AWS CloudHSM
AnswersC, D

KMS creates and manages encryption keys that can be used by both S3 and SageMaker.

Why this answer

AWS KMS allows creation of customer-managed keys. SageMaker can be configured to use a KMS key to encrypt model artifacts and the ML storage volume. S3 also integrates with KMS for server-side encryption.

194
MCQhard

A media company is using Amazon Bedrock to generate marketing copy with a foundation model. They want to ensure the output adheres to brand voice guidelines (e.g., friendly, professional). Which prompt engineering strategy is most effective for this requirement?

A.Provide five example outputs in the prompt that match the desired tone.
B.Include instructions like 'Do not use technical jargon' in every user prompt.
C.Set the temperature parameter to a low value (e.g., 0.1) to reduce randomness.
D.Use a system prompt that explicitly describes the brand voice and expectations.
AnswerD

System prompts set the role and tone, effectively guiding the model's style for all subsequent interactions.

Why this answer

Amazon Bedrock supports system prompts that set overarching context and behavioral guidelines for the model. By explicitly describing the brand voice (e.g., 'friendly, professional') in the system prompt, the model consistently applies these constraints across all user interactions, which is more effective than per-instruction tuning.

Exam trap

AWS often tests the misconception that parameter tuning (like temperature) or few-shot examples are sufficient for style control, when in fact system prompts provide the most direct and scalable mechanism for enforcing behavioral constraints in foundation models.

How to eliminate wrong answers

Option A is wrong because providing example outputs (few-shot prompting) can guide tone but is less reliable than a system prompt for consistent adherence across diverse inputs, and it consumes prompt token budget without guaranteeing the model internalizes the rule. Option B is wrong because including instructions like 'Do not use technical jargon' in every user prompt is redundant, inefficient, and can be overridden by the model's tendency to follow the most recent instruction, whereas a system prompt sets a persistent baseline. Option C is wrong because lowering the temperature parameter reduces randomness but does not enforce specific brand voice constraints; it only makes outputs more deterministic, which may still produce off-tone content if the model's training data lacks the desired style.

195
MCQeasy

A data scientist at a retail company is tasked with building a model to predict customer churn. The dataset contains 100,000 records with features such as age, purchase history, customer support interactions, and a binary label indicating whether the customer churned in the past. The team needs a model that can be deployed for real-time inference with low latency. They have limited time and want to use a built-in algorithm from Amazon SageMaker that is optimized for classification tasks. Which approach should they take?

A.Use Amazon SageMaker PCA algorithm
B.Use Amazon SageMaker XGBoost algorithm
C.Use Amazon SageMaker K-Means algorithm
D.Use Amazon SageMaker BlazingText algorithm
AnswerB

XGBoost is a built-in algorithm for classification and works well with tabular data.

Why this answer

Amazon SageMaker's built-in XGBoost algorithm is optimized for classification tasks like binary churn prediction, supports real-time inference with low latency via SageMaker endpoints, and can handle the dataset size of 100,000 records efficiently. It is a supervised learning algorithm that directly uses the binary label for training, making it the correct choice for this scenario.

Exam trap

The trap here is that candidates may confuse unsupervised algorithms (PCA, K-Means) or domain-specific algorithms (BlazingText for text) with general-purpose supervised classification algorithms, overlooking that XGBoost is the only built-in SageMaker algorithm among the options designed for tabular classification with real-time inference needs.

How to eliminate wrong answers

Option A is wrong because PCA (Principal Component Analysis) is an unsupervised dimensionality reduction algorithm, not a classification algorithm, and cannot predict churn from a binary label. Option C is wrong because K-Means is an unsupervised clustering algorithm used for grouping data, not for supervised classification tasks like churn prediction. Option D is wrong because BlazingText is optimized for text classification and word embeddings, not for tabular data with features like age and purchase history.

196
Multi-Selecthard

A financial services company uses Amazon SageMaker Feature Store to manage features for machine learning models. The compliance auditor requires that all changes to feature definitions are logged and that feature data is immutable once written. Which TWO approaches should the team implement? (Choose two.)

Select 2 answers
A.Enable AWS CloudTrail for SageMaker Feature Store API calls.
B.Use SageMaker Feature Store offline store with record identifier and event time.
C.Enable feature group versioning to track changes to feature definitions.
D.Implement feature store online store with TTL to automatically expire data.
E.Use AWS Config to track changes to Feature Store resources.
AnswersA, C

CloudTrail logs all API calls, providing an audit trail for changes.

Why this answer

Enabling AWS CloudTrail for SageMaker Feature Store API calls provides a detailed audit log of all operations, including changes to feature definitions (e.g., CreateFeatureGroup, UpdateFeatureGroup). This satisfies the compliance requirement for logging all changes. Option C is correct because enabling feature group versioning in SageMaker Feature Store allows you to track and manage changes to feature definitions over time, ensuring a historical record of modifications.

Exam trap

The trap here is that candidates often confuse AWS Config (which tracks resource configuration changes) with AWS CloudTrail (which logs API calls), or they mistakenly think the offline store's point-in-time query capability inherently enforces data immutability, when in fact immutability requires explicit design choices.

197
Multi-Selectmedium

A company needs to govern the lifecycle of ML models, including versioning, monitoring for drift, and decommissioning outdated models. Which TWO services should they use? (Choose 2)

Select 2 answers
A.AWS CloudTrail
B.Amazon SageMaker Model Registry
C.Amazon SageMaker Model Monitor
D.Amazon S3
E.AWS CodePipeline
AnswersB, C

Model Registry manages model versions, approvals, and lifecycle stages.

Why this answer

SageMaker Model Registry handles versioning and model approval; SageMaker Model Monitor tracks drift and performance.

198
Multi-Selectmedium

A company is using Amazon Bedrock to deploy a chatbot. They want to ensure that the chatbot does not produce harmful or biased content. Which TWO AWS services or features can be used together to implement content moderation and monitoring?

Select 2 answers
A.Amazon SageMaker Model Monitor for drift detection
B.Amazon Rekognition for image moderation
C.Amazon Comprehend for sentiment analysis
D.Amazon Bedrock Guardrails for content filtering
E.Amazon CloudWatch Logs for logging and analyzing model outputs
AnswersD, E

Guardrails can filter harmful, toxic, or biased content in model responses.

Why this answer

Amazon Bedrock Guardrails (Option D) is correct because it provides built-in content filtering capabilities specifically designed for foundation models, allowing you to define denied topics, filter harmful content, and enforce safety policies directly within the Bedrock chatbot workflow. Amazon CloudWatch Logs (Option E) is correct because it enables you to log model inputs and outputs, which can be monitored for compliance, audited for bias, and used to trigger alerts when harmful content is detected. Together, they form a comprehensive content moderation and monitoring solution that addresses both proactive filtering and reactive analysis.

Exam trap

The AIF-C01 exam often tests the distinction between monitoring (CloudWatch Logs) and analysis (Comprehend, Rekognition) versus enforcement (Guardrails), leading candidates to mistakenly choose services that only analyze or detect content without the ability to block or filter it in real time.

199
MCQmedium

A healthcare company uses Amazon Bedrock to generate patient summaries. They need to ensure no protected health information (PHI) is leaked in the output. Which AWS service can they use to detect and mask PHI in text?

A.Amazon Comprehend Medical
B.Amazon Macie
C.AWS Glue
D.Amazon Rekognition
AnswerA

Comprehend Medical can identify and mask PHI such as patient names and dates.

Why this answer

Amazon Comprehend Medical is specifically designed to extract and identify protected health information (PHI) from unstructured medical text using natural language processing (NLP). It can detect entities such as patient names, dates, medical conditions, and medications, and provides APIs to mask or redact that PHI before output. This makes it the correct choice for the healthcare company's requirement to prevent PHI leakage in patient summaries generated by Amazon Bedrock.

Exam trap

AWS often tests the distinction between general-purpose data protection services (like Macie) and domain-specific medical NLP services (like Comprehend Medical), leading candidates to choose Macie because it is associated with sensitive data discovery, even though it cannot perform inline text masking.

How to eliminate wrong answers

Option B (Amazon Macie) is wrong because Macie is a data security service that discovers and protects sensitive data stored in Amazon S3 using machine learning and pattern matching, but it does not provide real-time PHI detection or masking in text streams or API outputs. Option C (AWS Glue) is wrong because Glue is a serverless data integration service for ETL (extract, transform, load) jobs, not a text analysis or PHI detection service. Option D (Amazon Rekognition) is wrong because Rekognition is an image and video analysis service that can detect objects, faces, and text in media, but it is not designed to identify or mask PHI in textual data.

200
MCQmedium

A healthcare startup deploys a model to predict patient readmission risk using Amazon SageMaker. After deployment, the model shows higher false-positive rates for a specific age group. What is the most responsible first step?

A.Increase the prediction threshold for the affected group
B.Use Amazon SageMaker Clarify to detect bias in predictions
C.Retrain the model with more data from the affected group
D.Immediately retire the model to prevent harm
AnswerB

Clarify provides bias metrics to inform next steps.

Why this answer

Amazon SageMaker Clarify is purpose-built for detecting bias in ML models and data. It provides bias metrics (e.g., Difference in Positive Proportions in Predicted Labels, Disparate Impact) that can quantify whether the model's predictions are systematically skewed against a specific age group. This is the most responsible first step because it objectively measures the bias before any corrective action is taken.

Exam trap

AWS often tests the misconception that the first step to address bias is to immediately retrain or adjust thresholds, rather than using a dedicated bias detection tool like SageMaker Clarify to first diagnose the nature and extent of the bias.

How to eliminate wrong answers

Option A is wrong because increasing the prediction threshold for the affected group is a post-hoc adjustment that does not address the root cause of bias and can introduce new fairness issues or degrade overall model performance. Option C is wrong because retraining with more data from the affected group assumes the bias stems from data imbalance, but without first using SageMaker Clarify to confirm the bias source, this could be ineffective or even harmful (e.g., if bias is due to feature encoding or labeling). Option D is wrong because immediately retiring the model is an overreaction that ignores the possibility of mitigation; responsible AI practices require diagnosis before drastic action.

201
MCQhard

An AI practitioner is deploying a large language model (LLM) for a customer support application. They are concerned about hallucinations, where the model generates plausible but incorrect information. Which combination of techniques would be MOST effective to mitigate hallucinations?

A.Use Retrieval-Augmented Generation (RAG) and enable Bedrock Guardrails
B.Disable human review and increase max tokens
C.Increase model temperature and use top-k sampling
D.Fine-tune the model on a small dataset and reduce context length
AnswerA

RAG grounds the model in retrieved facts, and Guardrails allow setting boundaries to block harmful or false outputs.

Why this answer

Grounding the model with RAG and using Bedrock Guardrails are effective techniques to reduce hallucinations by providing context and enforcing constraints.

202
MCQeasy

A startup needs to generate product descriptions from bullet points using a foundation model. They want a fully managed serverless experience. Which AWS service should they use?

A.Amazon Comprehend
B.Amazon Bedrock
C.Amazon Polly
D.Amazon Lex
AnswerB

Bedrock offers serverless foundation models for generation tasks.

Why this answer

Amazon Bedrock is a fully managed serverless service that provides access to foundation models (FMs) from leading AI providers via an API, making it ideal for generating product descriptions from bullet points. It eliminates infrastructure management while allowing you to invoke models like Anthropic Claude or Amazon Titan for text generation tasks.

Exam trap

The trap here is that candidates confuse Amazon Comprehend (a text analysis service) with a generative AI service, or assume Polly or Lex can generate text descriptions when they are specialized for speech and conversation, respectively.

How to eliminate wrong answers

Option A is wrong because Amazon Comprehend is a natural language processing (NLP) service for extracting insights (e.g., sentiment, entities) from text, not for generating new content from bullet points. Option C is wrong because Amazon Polly is a text-to-speech service that converts text into lifelike speech, not a foundation model for text generation. Option D is wrong because Amazon Lex is a service for building conversational interfaces (chatbots) using automatic speech recognition and natural language understanding, not for generating product descriptions from bullet points.

203
MCQeasy

A company wants to automatically discover sensitive data such as credit card numbers in their Amazon S3 training datasets before using them for model training. Which AWS service should they use?

A.Amazon Macie
B.AWS Config
C.Amazon GuardDuty
D.AWS Audit Manager
AnswerA

Macie uses ML and pattern matching to identify sensitive data like PII, financial numbers, etc., in S3.

Why this answer

Amazon Macie uses machine learning and pattern matching to discover and protect sensitive data in S3.

204
Multi-Selectmedium

Which TWO of the following are examples of supervised learning tasks that can be performed using Amazon SageMaker built-in algorithms?

Select 2 answers
A.Principal Component Analysis (PCA)
B.XGBoost
C.Linear Learner
D.Latent Dirichlet Allocation (LDA)
E.K-Means
AnswersB, C

XGBoost is a supervised gradient boosting algorithm.

Why this answer

XGBoost is a supervised learning algorithm that uses gradient-boosted decision trees for regression, classification, and ranking tasks. Amazon SageMaker's built-in XGBoost algorithm is optimized for distributed training and directly supports labeled training data, making it a correct example of a supervised learning task.

Exam trap

The AIF-C01 exam often tests the distinction between supervised and unsupervised learning by listing algorithms like PCA, LDA, and K-Means alongside supervised ones, trapping candidates who recognize the algorithm names but forget their learning paradigm.

205
MCQmedium

A data science team needs to grant a SageMaker notebook instance access to an S3 bucket containing training data. Which IAM policy should be attached to the notebook instance's execution role?

A.An IAM policy that allows the sagemaker:InvokeEndpoint action
B.An IAM policy that allows kms:Decrypt on the S3 bucket's KMS key
C.An IAM policy that allows ec2:DescribeVpcs
D.An IAM policy that allows s3:GetObject and s3:ListBucket on the specific bucket
AnswerD

The notebook instance's execution role needs these permissions to read training data.

Why this answer

A SageMaker notebook instance needs read access to the S3 bucket containing training data. The execution role must have an IAM policy that explicitly allows s3:GetObject (to read objects) and s3:ListBucket (to list the bucket contents) on the specific bucket. Without these permissions, the notebook cannot retrieve the training data.

Exam trap

The AIF-C01 exam often tests the distinction between the permissions needed for data access (S3 actions) versus inference (SageMaker actions) or encryption (KMS actions), leading candidates to overcomplicate by adding unnecessary permissions like kms:Decrypt when the question does not mention encryption.

How to eliminate wrong answers

Option A is wrong because sagemaker:InvokeEndpoint is used to invoke a deployed SageMaker endpoint for inference, not to access S3 training data. Option B is wrong because while kms:Decrypt may be needed if the S3 bucket uses KMS encryption, it is not the primary permission required; the core need is s3:GetObject and s3:ListBucket. Option C is wrong because ec2:DescribeVpcs is used for VPC networking operations, not for S3 data access.

206
MCQeasy

A company wants to use a pre-trained generative AI model to analyze customer feedback. They need to adjust the model for their specific domain without retraining from scratch. Which approach is MOST suitable?

A.Fine-tuning the model on domain-specific data
B.Reinforcement Learning from Human Feedback (RLHF)
C.Training a new model from scratch on the domain data
D.Using prompt engineering to provide context
AnswerA

Fine-tuning is efficient for domain adaptation using pre-trained models.

Why this answer

Fine-tuning is the most suitable approach because it takes a pre-trained generative AI model and updates its weights using a smaller, domain-specific dataset (e.g., customer feedback transcripts). This allows the model to adapt to the company's specific terminology, sentiment patterns, and context without the massive computational cost and data requirements of training from scratch. It preserves the general language understanding from pre-training while specializing the model for the target domain.

Exam trap

The AIF-C01 exam often tests the distinction between prompt engineering (a zero-shot or few-shot method that does not modify the model) and fine-tuning (which updates model weights), leading candidates to mistakenly choose prompt engineering as a simpler but insufficient solution for deep domain adaptation.

How to eliminate wrong answers

Option B (RLHF) is wrong because RLHF is a technique used to align model outputs with human preferences through reward modeling, not primarily for domain adaptation; it requires a separate reward model and human feedback loop, making it overkill and less direct for simply specializing on domain-specific data. Option C (training a new model from scratch) is wrong because it discards the benefits of pre-training, requiring enormous amounts of domain data and compute resources, which contradicts the requirement to avoid retraining from scratch. Option D (prompt engineering) is wrong because while it can provide context at inference time, it does not adjust the model's internal weights or permanently adapt it to the domain; it relies on the model's existing knowledge and may fail for nuanced or rare domain-specific terms.

207
Multi-Selectmedium

A company is using Amazon Bedrock to generate images. They want to ensure the outputs comply with content policies. Which TWO AWS services can help? (Choose two.)

Select 2 answers
A.Amazon Augmented AI (A2I)
B.Amazon Rekognition
C.Amazon GuardDuty
D.AWS WAF
E.Amazon Comprehend
AnswersA, B

A2I enables human review of flagged images to enforce content policies.

Why this answer

Amazon Augmented AI (A2I) is correct because it enables human review of model predictions to ensure compliance with content policies. For image generation on Bedrock, A2I can route outputs that fall below a confidence threshold to human reviewers, providing a safety net for policy adherence.

Exam trap

AWS often tests the distinction between services that analyze images (Rekognition) versus text (Comprehend), and candidates may mistakenly choose Comprehend for image content moderation without recognizing it is NLP-only.

208
MCQeasy

A data scientist wants to detect potential bias in a binary classification model before deployment. Which AWS service can analyze the model's predictions across different demographic groups?

A.Amazon SageMaker Ground Truth
B.Amazon CloudWatch Logs Insights
C.Amazon SageMaker Clarify
D.Amazon SageMaker Model Monitor
AnswerC

SageMaker Clarify is specifically designed for bias detection and explainability.

Why this answer

Amazon SageMaker Clarify is the correct service because it is specifically designed to detect bias in machine learning models by analyzing predictions across demographic groups. It provides pre-training and post-training bias metrics, such as disparate impact and difference in positive proportions, enabling data scientists to evaluate fairness before deployment.

Exam trap

The trap here is that candidates may confuse SageMaker Model Monitor (which monitors for drift and quality) with SageMaker Clarify (which specifically handles bias detection), as both involve monitoring model behavior but serve different purposes.

How to eliminate wrong answers

Option A is wrong because Amazon SageMaker Ground Truth is a data labeling service used to create training datasets, not for analyzing model predictions for bias. Option B is wrong because Amazon CloudWatch Logs Insights is a log querying and analysis tool for operational monitoring, not designed for bias detection in ML model predictions. Option D is wrong because Amazon SageMaker Model Monitor focuses on detecting data drift and model quality degradation over time, not on analyzing predictions for bias across demographic groups.

209
MCQhard

A company wants to deploy a real-time inference endpoint for a custom model on SageMaker. The model has high latency (100ms) and they need to handle variable traffic with spikes. Which deployment strategy is most cost-effective?

A.Deploy on a SageMaker multi-model endpoint
B.Use batch transform
C.Deploy on a single SageMaker endpoint with automatic scaling
D.Use a single large instance type
AnswerC

Automatic scaling adds instances based on load, providing cost-effective handling of variable traffic.

Why this answer

A single SageMaker endpoint with automatic scaling allows the endpoint to dynamically adjust the number of instances based on traffic patterns, handling variable traffic and spikes cost-effectively. For a model with 100ms latency, automatic scaling can add instances during spikes and remove them during low traffic, ensuring you only pay for the compute resources you use while maintaining low inference latency.

Exam trap

The trap here is that candidates often confuse multi-model endpoints with cost-effective scaling for a single model, not realizing that multi-model endpoints are designed for hosting many models, not for handling variable traffic for one model with high latency.

How to eliminate wrong answers

Option A is wrong because a multi-model endpoint is designed to host multiple models on a shared instance to reduce costs, but it does not inherently handle high-latency models (100ms) well under variable traffic spikes, as it can lead to resource contention and increased latency. Option B is wrong because batch transform is an asynchronous, offline inference method for processing large datasets in batches, not suitable for real-time inference endpoints that require immediate responses. Option D is wrong because using a single large instance type is not cost-effective for variable traffic with spikes; you would over-provision for peak traffic and pay for idle capacity during low traffic, whereas automatic scaling adjusts resources dynamically.

210
MCQeasy

A company is building a customer service chatbot using Amazon Bedrock. Which component of a foundation model determines the creativity and randomness of the generated responses?

A.Prompt template
B.Temperature
C.Max tokens
D.Top-p
AnswerB

Temperature scales the logits before softmax, controlling randomness. Lower values make outputs more deterministic.

Why this answer

The temperature parameter controls randomness. Higher values (e.g., >1) produce more creative but less focused outputs, while lower values (e.g., near 0) produce more deterministic responses.

211
MCQhard

A healthcare startup is using Amazon Bedrock to generate clinical notes. They must prevent the model from outputting any personally identifiable information (PII) such as patient names. What is the most effective approach?

A.Fine-tune the model on de-identified data only
B.Configure a guardrail in Amazon Bedrock to deny PII topics
C.Use a prompt engineering technique to instruct the model to avoid PII
D.Post-process the output with a regex filter
AnswerB

Guardrails provide robust content filtering that can detect and block PII, making this the most effective approach.

Why this answer

Amazon Bedrock Guardrails provide a native, policy-based mechanism to deny the generation of PII topics at inference time, without requiring model retraining or external filtering. This approach directly intercepts and blocks prohibited content before it is returned, offering the most reliable and maintainable solution for compliance with healthcare privacy regulations like HIPAA.

Exam trap

AWS often tests the misconception that prompt engineering or fine-tuning alone can provide reliable content safety, when in fact guardrails (or similar policy-based controls) are required for deterministic enforcement in production environments.

How to eliminate wrong answers

Option A is wrong because fine-tuning on de-identified data only does not guarantee the model will never generate PII; the model may still hallucinate or infer PII from context, and fine-tuning is costly and time-consuming without providing a runtime enforcement layer. Option C is wrong because prompt engineering is a soft instruction that the model can ignore or fail to follow consistently, especially when faced with adversarial or ambiguous inputs, and it offers no deterministic enforcement. Option D is wrong because post-processing with a regex filter is brittle and cannot catch all forms of PII (e.g., misspellings, paraphrased names, or contextually inferred identities), and it still allows PII to be generated before filtering, which may violate compliance requirements.

212
MCQmedium

An AI system is used to detect fraudulent transactions. The system has a high false positive rate for a certain demographic group. To ensure fairness and reduce false positives, which mitigation strategy should be considered?

A.Re-weight the training data to give more importance to samples from the affected group
B.Increase the model complexity
C.Reduce the decision threshold globally
D.Remove the demographic attribute from the model
AnswerA

Re-weighting can adjust for representation and reduce disparate false positive rates.

Why this answer

Re-weighting training samples from the affected group can help the model learn to reduce false positives for that group, addressing the bias.

213
MCQeasy

A company uses Amazon Bedrock to access foundation models. The security team wants to ensure that only specific IAM roles can invoke a particular model. Which configuration should they use?

A.Attach an S3 bucket policy to the model artifacts
B.Configure a VPC endpoint for Bedrock
C.Use AWS Organizations service control policies to deny all model access
D.Create a Bedrock resource policy that grants InvokeModel to the required roles
AnswerD

Bedrock resource policies are attached to models and specify which principals can invoke them.

Why this answer

Amazon Bedrock uses resource-based policies attached to the model to control access. IAM policies alone are insufficient because the model resource itself must grant access to specific principals.

214
MCQeasy

Which of the following is a benefit of using cross-validation during model training?

A.It reduces training time by using all data for training simultaneously
B.It eliminates the need for feature engineering
C.It provides a more reliable estimate of model performance on unseen data
D.It guarantees that the model will achieve high accuracy on the test set
AnswerC

Cross-validation averages performance across folds, giving a more stable and less biased estimate.

Why this answer

Cross-validation partitions the dataset into multiple folds, training on some and validating on others iteratively. This process yields a more reliable estimate of model performance on unseen data by reducing the variance associated with a single train-test split and ensuring the model is evaluated across different subsets of the data.

Exam trap

The trap here is that candidates often confuse cross-validation with a method to improve model accuracy or reduce training time, when in fact its primary purpose is to provide a more reliable estimate of model performance on unseen data.

How to eliminate wrong answers

Option A is wrong because cross-validation actually increases training time, as the model must be trained multiple times (once per fold), not reduces it. Option B is wrong because cross-validation does not eliminate the need for feature engineering; feature engineering is a separate preprocessing step that cross-validation does not address. Option D is wrong because cross-validation does not guarantee high accuracy on the test set; it only provides a more robust estimate of generalization performance, but model accuracy still depends on data quality, model choice, and hyperparameters.

215
MCQmedium

During model training, the loss decreases rapidly for the first few epochs and then plateaus. The validation loss starts increasing after some epochs. What should the team do to improve generalization?

A.Increase learning rate
B.Early stopping
C.Increase training epochs
D.Add more layers
AnswerB

Early stopping stops training before overfitting occurs.

Why this answer

The validation loss increasing while training loss continues to decrease is a classic sign of overfitting. Early stopping (Option B) halts training when validation performance stops improving, preventing the model from memorizing noise in the training data and thereby improving generalization.

Exam trap

The AIF-C01 exam often tests the misconception that overfitting is solved by increasing model complexity or training longer, when in fact the opposite is true—early stopping or regularization techniques are required to curb overfitting.

How to eliminate wrong answers

Option A is wrong because increasing the learning rate would cause larger weight updates, potentially overshooting minima and destabilizing training, which does not address overfitting. Option C is wrong because increasing training epochs would allow the model to continue fitting the training data even more closely, exacerbating overfitting rather than improving generalization. Option D is wrong because adding more layers increases model capacity, making it more prone to overfitting on the training data, not less.

216
MCQmedium

An insurance company is using a machine learning model to approve claims. They want to ensure that the model's approval rate is similar across different demographic groups. Which fairness metric would directly measure whether the proportion of positive outcomes is equal across groups?

A.Demographic parity
B.Disparate impact ratio
C.Equalized odds
D.SHAP values
AnswerA

Demographic parity measures whether the proportion of positive outcomes is the same across groups, directly addressing the requirement.

Why this answer

Demographic parity, also known as statistical parity, requires that the probability of a positive outcome is the same for all groups. Equalized odds focuses on equal true positive and false positive rates, disparate impact measures the ratio of positive outcomes, but demographic parity directly compares proportions.

217
Multi-Selectmedium

Which TWO of the following are best practices for data preprocessing in machine learning? (Select TWO.)

Select 2 answers
A.Use cross-validation to evaluate model performance
B.Always split data 80/20 for training and testing
C.One-hot encoding for ordinal categories
D.Feature scaling for gradient-based algorithms
E.Drop duplicate records only if they are manual entry errors
AnswersA, D

Cross-validation provides a more reliable estimate of model generalization.

Why this answer

Cross-validation is a best practice for evaluating model performance because it provides a more robust estimate of how the model will generalize to unseen data by partitioning the data into multiple training and validation sets. This reduces the variance associated with a single train-test split and helps detect overfitting, making it a standard technique in machine learning workflows.

Exam trap

AWS often tests the misconception that one-hot encoding is universally applicable to all categorical data, but the trap here is that candidates forget ordinal categories have a natural order that one-hot encoding discards, leading to loss of information and potentially worse model performance.

218
MCQmedium

A data scientist needs to allow a foundation model in Amazon Bedrock to access a specific S3 bucket containing reference documents. The bucket is in a different AWS account. What is the MOST secure way to grant access?

A.Use AWS Lake Formation to grant cross-account access to the bucket
B.Copy the S3 bucket to the same account as Bedrock
C.Configure the S3 bucket policy to allow access from the Bedrock service role and add a Bedrock resource policy allowing the bucket
D.Make the S3 bucket public and use a pre-signed URL
AnswerC

This two-way policy approach ensures only the specified Bedrock role can access the bucket, following cross-account security best practices.

Why this answer

Cross-account access requires both the S3 bucket policy to grant the Bedrock service role and the Bedrock resource policy to allow the bucket, ensuring least privilege.

219
MCQmedium

A multinational corporation uses a foundation model via Amazon Bedrock to translate internal communication documents from English to multiple languages. They notice that the translations often miss company-specific jargon and acronyms, leading to confusion. The company has a glossary of approved translations for terms like 'Project Atlas' and 'Operation Synergy.' They want to improve translation accuracy quickly and with minimal effort. What approach should they take?

A.Use prompt engineering to include the glossary in each translation request.
B.Use a larger foundation model that has better language understanding.
C.Fine-tune the foundation model on a corpus of bilingual company documents.
D.Switch to Amazon Translate with custom terminology.
AnswerA

Including the glossary in the prompt directly informs the model of the correct translations.

Why this answer

Prompt engineering allows the company to inject the glossary directly into the context window of the foundation model with each translation request. This approach requires no model retraining or infrastructure changes, enabling rapid improvement by simply appending the approved translations as instructions or few-shot examples. It is the quickest and least effortful method to enforce company-specific terminology without altering the underlying model.

Exam trap

The trap here is that candidates may overestimate the effort required for prompt engineering or underestimate the speed and simplicity of in-context learning, leading them to choose fine-tuning or a different service when the most direct and minimal-effort solution is to augment the prompt with the glossary.

How to eliminate wrong answers

Option B is wrong because simply using a larger foundation model does not guarantee it will learn or prioritize the company's specific jargon and acronyms; larger models have broader general knowledge but still lack domain-specific customizations without additional context or fine-tuning. Option C is wrong because fine-tuning requires preparing a labeled bilingual corpus of company documents, which is time-consuming and resource-intensive, contradicting the requirement for minimal effort and quick improvement. Option D is wrong because Amazon Translate is a different service from Amazon Bedrock; the question explicitly states they are using a foundation model via Bedrock, and switching to a separate service would involve architectural changes and additional integration effort, not a minimal-effort adjustment.

220
MCQmedium

A developer is using Amazon Bedrock to generate text summaries. The output sometimes includes irrelevant information. What is the most effective prompt engineering technique to improve relevance?

A.Add a negative prompt specifying what to avoid
B.Use few-shot examples with summaries
C.Increase max tokens
D.Decrease temperature
AnswerB

Few-shot examples show the model desired output patterns, improving relevance.

Why this answer

Few-shot examples provide the model with explicit patterns of desired output, directly guiding it to produce summaries that match the format and content of the examples. This technique is the most effective for improving relevance because it gives the model concrete reference points, reducing the likelihood of including irrelevant information.

Exam trap

AWS often tests the misconception that adjusting generation parameters (like temperature or token limits) can substitute for explicit prompt structure, when in fact few-shot examples directly teach the model the expected output format and content relevance.

How to eliminate wrong answers

Option A is wrong because negative prompts (e.g., 'avoid irrelevant details') are less reliable in foundation models; they can be ignored or misinterpreted, and they do not provide the structured guidance that few-shot examples offer. Option C is wrong because increasing max tokens only expands the output length, which can actually increase the chance of including irrelevant information rather than improving relevance. Option D is wrong because decreasing temperature reduces randomness but does not teach the model what relevant content looks like; it may still produce irrelevant information if the prompt lacks clear examples.

221
MCQmedium

A developer is building an agent using Amazon Bedrock Agents to automate a multi-step workflow that involves querying several databases and APIs. The agent needs to handle intermediate results and decide the next step based on previous outputs. Which capability of Bedrock Agents enables this?

A.Multi-step reasoning
B.Action groups
C.Guardrails
D.Knowledge bases
AnswerA

Agents use orchestration and chain-of-thought to perform multi-step reasoning, adapting based on intermediate results.

Why this answer

Amazon Bedrock Agents uses multi-step reasoning (often powered by the ReAct pattern—Reasoning and Acting) to decompose a complex user request into a sequence of logical steps, invoke the appropriate action groups or knowledge bases at each step, and use the output of one step as input to decide the next. This capability is essential for automating workflows that require intermediate results and dynamic decision-making based on previous outputs.

Exam trap

The trap here is that candidates often confuse 'action groups' (the ability to call external tools) with the orchestration logic that decides when and how to call those tools, leading them to select Option B instead of recognizing that multi-step reasoning is the distinct capability for chaining steps based on intermediate outputs.

How to eliminate wrong answers

Option B is wrong because action groups define the set of APIs or database operations the agent can call, but they do not provide the orchestration logic to decide the sequence of calls based on intermediate results. Option C is wrong because guardrails enforce content policies and safety constraints (e.g., filtering harmful responses), not workflow sequencing or conditional branching. Option D is wrong because knowledge bases provide a repository of information for retrieval-augmented generation (RAG), but they do not handle the step-by-step reasoning or state management required to chain multiple queries.

222
MCQmedium

A machine learning team needs to share a trained model with multiple teams across different AWS accounts. The model artifacts are stored in an S3 bucket in the central account. What is the most secure way to grant cross-account read access to the model artifacts?

A.Use an S3 bucket policy that grants access to the root user of each target account.
B.Make the S3 bucket public.
C.Use S3 cross-region replication to copy the artifacts to each target account's bucket.
D.Use AWS KMS to encrypt the artifacts and share the KMS key with the target accounts, then use bucket policies and IAM roles in the target accounts.
AnswerD

This ensures least privilege and encryption in transit and at rest.

Why this answer

It implements a defense-in-depth approach: AWS KMS encrypts the model artifacts at rest, and cross-account access is granted by combining an S3 bucket policy that allows the target accounts' IAM roles to read the objects, with those roles assuming the necessary permissions. This ensures that only authenticated and authorized IAM principals in the target accounts can decrypt and access the artifacts, preventing unauthorized access even if the bucket policy is misconfigured.

Exam trap

The trap here is that candidates often assume S3 bucket policies alone are sufficient for cross-account access, overlooking the need for KMS key policies and IAM role permissions when encryption is involved, which is a common real-world requirement for securing sensitive ML artifacts.

How to eliminate wrong answers

Option A is wrong because granting access to the root user of each target account is overly permissive and violates the principle of least privilege; root users have unrestricted access and cannot be audited per specific IAM role or user. Option B is wrong because making the S3 bucket public exposes the model artifacts to anyone on the internet, completely bypassing authentication and authorization, which is insecure for sensitive ML artifacts. Option C is wrong because S3 cross-region replication only copies objects to another bucket; it does not grant cross-account read access to the original bucket, and the replicated objects would still require separate permissions in the target account, adding complexity without solving the access control problem.

223
Multi-Selectmedium

A company uses AWS Lake Formation to govern data used for AI/ML. They have a data lake containing customer transaction data. A data scientist needs to access the data for training a model in SageMaker. Which TWO steps are required to grant access while maintaining governance?

Select 2 answers
A.Disable Lake Formation and use S3 bucket policies only
B.Register the SageMaker execution role as a Lake Formation principal and grant it the necessary permissions
C.Grant the data scientist's IAM role SELECT permission on the relevant database and tables in Lake Formation
D.Modify the S3 bucket policy to allow public access
E.Create an IAM policy that allows the SageMaker execution role to access all S3 buckets
AnswersB, C

The SageMaker role must be authorized in Lake Formation to access the data.

Why this answer

Lake Formation requires that the data scientist's IAM role be granted SELECT permission on the database/table. Additionally, the SageMaker execution role needs access to the data, and Lake Formation integration requires the role to have Lake Formation permissions. Just granting IAM permissions without Lake Formation or vice versa will not work.

224
MCQeasy

A developer wants to create an agent using Amazon Bedrock Agents that can call an external API to check inventory levels. What must be defined in the agent configuration to enable this API call?

A.A knowledge base
B.A guardrail
C.An action group
D.A prompt template
AnswerC

Action groups define the APIs or functions the agent can call, including inventory check APIs.

Why this answer

Action groups define the set of actions (API calls) that an agent can perform. Each action group specifies the API schema and optionally a Lambda function for execution.

225
Multi-Selecthard

A data scientist is fine-tuning a foundation model on SageMaker. They want to prevent overfitting. Which THREE actions can help? (Select THREE.)

Select 3 answers
A.Apply dropout
B.Increase training data size
C.Increase the number of epochs
D.Use early stopping
E.Use a smaller learning rate
AnswersA, B, D

Dropout prevents co-adaptation of neurons.

Why this answer

Dropout is a regularization technique that randomly drops a fraction of neurons during training, which prevents the model from relying too heavily on specific features and reduces overfitting. In SageMaker, dropout can be applied via framework-specific APIs (e.g., `tf.keras.layers.Dropout` in TensorFlow) or by configuring the model architecture in the training script.

Exam trap

AWS often tests the misconception that increasing epochs or using a smaller learning rate directly prevents overfitting, when in fact these are hyperparameter tuning strategies that can exacerbate or fail to address overfitting without explicit regularization.

Page 2

Page 3 of 9

Page 4

All pages