Courseiva

AWS Certified AI Practitioner AIF-C01 (AIF-C01) — Questions 301375

619 questions total · 9pages · All types, answers revealed

Page 4

Page 5 of 9

Page 6
301
Multi-Selectmedium

A company needs to secure data used for training machine learning models in Amazon SageMaker. Which TWO actions should be taken to protect data at rest and in transit? (Choose TWO.)

Select 2 answers
A.Use AWS Certificate Manager (ACM) to generate certificates for all SageMaker endpoints
B.Enable default encryption on S3 buckets using AWS KMS
C.Disable root access on SageMaker notebook instances
D.Use SageMaker with VPC endpoints and enforce HTTPS for API calls
E.Use SageMaker Model Registry to track model versions
AnswersB, D

This encrypts data at rest in S3.

Why this answer

Enabling default encryption on S3 buckets using AWS KMS ensures that all objects stored in the bucket are encrypted at rest. This is a fundamental security practice for protecting training data in SageMaker, as SageMaker reads data from S3. Using AWS KMS allows you to manage and audit encryption keys, providing fine-grained control over data protection.

Exam trap

AWS often tests the distinction between data protection mechanisms (encryption) and other security controls (access management, model governance), leading candidates to confuse disabling root access or using Model Registry with data encryption requirements.

302
MCQhard

A company is using Amazon SageMaker to train a model. The training data is stored in an S3 bucket that is encrypted with an AWS KMS customer managed key (CMK). The training job fails with an error indicating that the SageMaker execution role does not have permission to decrypt the data. The administrator has verified that the execution role has the kms:Decrypt permission. What additional permission might be missing?

A.kms:CreateGrant
B.kms:ReEncrypt
C.kms:DescribeKey
D.kms:GenerateDataKey
AnswerA

Allows SageMaker to create a grant on the KMS key for its internal service principal.

Why this answer

When SageMaker accesses encrypted S3 data, it must create a grant on the KMS key to allow the SageMaker service principal to decrypt the data on behalf of the execution role. Even if the execution role has kms:Decrypt, SageMaker itself needs permission to call kms:CreateGrant to set up this delegated access. Without kms:CreateGrant, the service cannot establish the necessary cryptographic context for the training job.

Exam trap

The trap here is that candidates assume kms:Decrypt alone is sufficient, overlooking that SageMaker requires kms:CreateGrant to delegate decryption permissions to the SageMaker service principal for cross-account or service-integrated access.

How to eliminate wrong answers

Option B is wrong because kms:ReEncrypt is used to re-encrypt data under a new key, which is not required for reading training data; the job only needs decryption. Option C is wrong because kms:DescribeKey provides metadata about the key but does not enable the service to decrypt data; it is not a prerequisite for SageMaker's S3 access. Option D is wrong because kms:GenerateDataKey is used to create new data keys for encryption, not for decrypting existing data; the training job needs to decrypt, not generate keys.

303
MCQeasy

A company wants to build a system that automatically categorizes customer support tickets into predefined categories (e.g., billing, technical, account). The team has a large dataset of historical tickets with their category labels. Which type of machine learning problem is this?

A.Regression
B.Binary classification
C.Multi-class classification
D.Clustering
AnswerC

The problem involves predicting one of several discrete categories using labeled training data.

Why this answer

This is a multi-class classification problem because the model must assign each support ticket to one of three or more predefined categories (e.g., billing, technical, account). The dataset provides labeled historical tickets, making it a supervised learning task, and the output is a discrete class label from a set of more than two categories, which distinguishes it from binary classification.

Exam trap

The AIF-C01 exam often tests the distinction between binary and multi-class classification by presenting a scenario with multiple categories but implying a simple yes/no decision, leading candidates to mistakenly choose binary classification when the number of classes exceeds two.

How to eliminate wrong answers

Option A is wrong because regression predicts continuous numerical values (e.g., ticket resolution time), not discrete categories. Option B is wrong because binary classification only handles two classes (e.g., spam vs. not spam), whereas this problem involves three or more categories. Option D is wrong because clustering is an unsupervised learning technique that groups data without using predefined labels, while this problem uses labeled historical data for supervised learning.

304
MCQhard

Which parameter controls the randomness of generated text in a foundation model?

A.top_p
B.stop sequences
C.max_tokens
D.temperature
AnswerD

Temperature directly affects randomness.

Why this answer

Temperature is the correct parameter because it directly controls the randomness of token sampling in a foundation model. A lower temperature (e.g., 0.1) makes the model more deterministic by concentrating probability mass on the most likely tokens, while a higher temperature (e.g., 1.5) flattens the probability distribution, increasing the likelihood of less probable tokens and thus generating more diverse or creative outputs.

Exam trap

AWS often tests the distinction between temperature (which reshapes the probability distribution) and top_p (which truncates the token set), leading candidates to confuse 'randomness control' with 'diversity via cumulative probability threshold'.

How to eliminate wrong answers

Option A is wrong because top_p (nucleus sampling) controls the cumulative probability threshold for token selection, not the randomness of the distribution itself; it dynamically chooses a set of tokens whose cumulative probability exceeds p, which is a different mechanism for diversity. Option B is wrong because stop sequences define specific strings that halt text generation (e.g., '\n\n' or a period), and they have no effect on the randomness or sampling behavior of the model. Option C is wrong because max_tokens sets a hard limit on the number of tokens generated in the output, controlling length rather than the stochasticity of token selection.

305
MCQhard

A financial institution uses a machine learning model to approve loan applications. To comply with regulatory requirements, they need to explain individual predictions. Which AWS service and feature combination should they use?

A.Amazon SageMaker Clarify with SHAP values
B.AWS Glue DataBrew with correlation analysis
C.Amazon QuickSight with ML Insights
D.Amazon SageMaker Model Monitor with data quality checks
AnswerA

SageMaker Clarify computes SHAP values, which provide local explanations for each prediction, showing feature contributions.

Why this answer

Amazon SageMaker Clarify provides SHAP-based feature importance for individual predictions, meeting the explainability requirement. SageMaker Model Monitor is for monitoring drift, not explainability.

306
Multi-Selecteasy

A company is evaluating different foundation models for a text summarization task using Amazon Bedrock. They want to use automated metrics to compare model outputs against reference summaries. Which TWO metrics are commonly used for summarization evaluation?

Select 2 answers
A.ROUGE
B.BLEURT
C.BERTScore
D.Perplexity
E.BLEU
AnswersA, C

ROUGE (Recall-Oriented Understudy for Gisting Evaluation) is a standard metric for summarization.

Why this answer

ROUGE and BERTScore are standard metrics for summarization. ROUGE measures n-gram overlap, BERTScore uses embeddings for semantic similarity. BLEU is for translation, Perplexity is for language modeling, and BLEURT is also relevant but not as common as ROUGE/BERTScore for summarization.

307
MCQeasy

An organization uses Amazon Macie to discover sensitive data in S3. The compliance team needs to receive notifications when Macie finds PII. Which AWS service should they use to send notifications?

A.AWS Lambda
B.Amazon CloudWatch
C.Amazon Simple Notification Service (SNS)
D.Amazon Simple Email Service (SES)
AnswerC

SNS is used for notifications triggered by Macie findings.

Why this answer

Amazon Macie publishes findings to Amazon EventBridge, which can trigger a target such as an SNS topic. SNS then pushes notifications (e.g., email, SMS, HTTP) to subscribers. This decoupled architecture allows the compliance team to receive real-time alerts when PII is detected, without needing to poll or manage compute resources.

Exam trap

The trap here is that candidates often confuse the service that generates the event (Macie) with the service that delivers the notification, or they assume Lambda is required for all event-driven workflows, when in fact SNS can directly receive events from EventBridge without any compute layer.

How to eliminate wrong answers

Option A is wrong because AWS Lambda is a compute service that can process events but does not itself send notifications; it would need to invoke SNS or another service to deliver messages. Option B is wrong because Amazon CloudWatch is for monitoring metrics, logs, and alarms, not for sending human-readable notifications directly to end users; it can trigger SNS but is not the notification delivery service. Option D is wrong because Amazon Simple Email Service (SES) is designed for sending transactional and marketing emails, not for event-driven notifications from Macie; SES requires explicit API calls and is not a native target for Macie findings via EventBridge.

308
MCQmedium

A data scientist is training a model using Amazon SageMaker and needs to ensure the training data is encrypted at rest and in transit. The data is stored in S3. Which combination of steps meets this requirement?

A.Use an S3 bucket with SSE-KMS encryption and configure the SageMaker training job to use a VPC with no internet access
B.Enable S3 Transfer Acceleration and use a public SageMaker training job
C.Use client-side encryption before uploading to S3 and disable SageMaker internet access
D.Enable default S3 bucket encryption and use a SageMaker notebook instance in a private subnet
AnswerA

SSE-KMS encrypts data at rest; VPC with no internet ensures data in transit stays within AWS network, and SageMaker uses HTTPS for encryption.

Why this answer

S3 server-side encryption (SSE-S3 or KMS) protects data at rest. SageMaker uses HTTPS for data in transit between S3 and the training instance, and VPC configuration can enforce network isolation.

309
MCQeasy

A startup uses Amazon Bedrock with a provisioned throughput to generate product images. They now have unpredictable traffic and want to reduce costs. What should they do?

A.Switch to batch inference using Amazon Bedrock.
B.Keep the provisioned throughput but reduce the number of units.
C.Use a different model or service like Amazon SageMaker with spot instances.
D.Switch to on-demand mode in Amazon Bedrock.
AnswerD

On-demand mode is serverless and cost-effective for variable traffic.

Why this answer

On-demand mode in Amazon Bedrock allows you to pay per inference request without committing to a provisioned throughput, making it ideal for unpredictable traffic patterns. This eliminates the cost of idle capacity while still providing access to the same foundation models. Option D directly addresses the need to reduce costs when traffic is variable.

Exam trap

The trap here is that candidates may assume provisioned throughput is always more cost-effective for any workload, overlooking that on-demand mode is specifically designed to eliminate idle costs for unpredictable traffic patterns.

How to eliminate wrong answers

Option A is wrong because batch inference is designed for processing large volumes of data asynchronously, not for handling unpredictable real-time traffic, and it still requires provisioning resources that may incur costs even when idle. Option B is wrong because reducing the number of provisioned throughput units still leaves you with committed capacity that must be paid for regardless of usage, which does not solve the cost issue for unpredictable traffic. Option C is wrong because switching to a different model or service like Amazon SageMaker with spot instances introduces additional complexity and does not leverage the native on-demand pricing model of Bedrock, which is specifically designed for variable workloads.

310
MCQhard

A data scientist is fine-tuning a large language model (LLM) using Amazon SageMaker. The training job is taking a long time and the cost is higher than expected. Which configuration change would MOST effectively reduce training time and cost while maintaining model quality?

A.Decrease the batch size
B.Enable managed spot training to use EC2 Spot Instances
C.Use a larger instance type with more vCPUs
D.Increase the number of hyperparameter tuning jobs
AnswerB

Spot instances can significantly reduce cost (up to 90%) and SageMaker manages interruptions seamlessly.

Why this answer

Managed spot training uses EC2 Spot Instances, which can reduce costs by up to 90% compared to On-Demand instances. SageMaker automatically manages checkpointing and retries for spot interruptions, so model quality is maintained while training time is not negatively impacted. This directly addresses the cost concern without sacrificing performance.

Exam trap

The trap here is that candidates often assume spot training is unreliable and will degrade model quality, but SageMaker's managed checkpointing and retry mechanism ensures training continuity, making it the most effective cost-saving measure without sacrificing quality.

How to eliminate wrong answers

Option A is wrong because decreasing the batch size typically increases the number of training steps per epoch, which can actually increase training time and may degrade model convergence quality due to noisier gradients. Option C is wrong because using a larger instance type with more vCPUs increases cost per hour and may not proportionally reduce training time due to diminishing returns from parallelism overhead, often leading to higher total cost. Option D is wrong because increasing the number of hyperparameter tuning jobs adds more training runs, which increases both total time and cost without directly improving the efficiency of the current training job.

311
MCQeasy

A developer is calling the Amazon Bedrock InvokeModel API to generate text with the AI21 Labs Jurassic-2 Mid model. The API call includes a maxTokens parameter, but the request fails with the error shown in the exhibit. What is the most likely cause of this error?

A.The API request is missing a required parameter such as 'prompt'.
B.The AWS region does not support the AI21 Labs model.
C.The value of 'maxTokens' exceeds the model's maximum limit.
D.The parameter name is incorrect; the model expects 'maxTokens' with a capital T.
AnswerD

Jurassic-2 Mid uses 'maxTokens' (capital T) as the parameter name for controlling output length.

Why this answer

The AI21 Labs Jurassic-2 Mid model expects the parameter name 'maxTokens' with a capital 'T' (camelCase). The error occurs because the API request used a different casing (e.g., 'maxtokens' or 'max_tokens'), which the model's schema does not recognize. Amazon Bedrock's InvokeModel API passes parameters directly to the model, so parameter names must match the model's exact specification.

Exam trap

The AIF-C01 exam often tests the nuance that model-specific parameter names must match exactly, including case sensitivity, and candidates mistakenly assume all Bedrock models use the same parameter naming convention.

How to eliminate wrong answers

Option A is wrong because the 'prompt' parameter is required for text generation models, and the error message in the exhibit does not indicate a missing required parameter; it points to an unrecognized parameter name. Option B is wrong because AWS region support for AI21 Labs models is independent of parameter naming errors; a region mismatch would produce a different error (e.g., 'Model not found' or 'AccessDeniedException'). Option C is wrong because exceeding the model's maximum token limit would result in a validation error about the value, not about the parameter name itself.

312
MCQhard

Refer to the exhibit. An IAM policy is attached to a role used by an Amazon SageMaker notebook instance. The notebook instance attempts to upload a model artifact to the S3 bucket 'my-bucket' without specifying server-side encryption. What will happen?

A.The upload succeeds because S3 automatically encrypts objects at rest
B.The upload fails because the policy does not allow PutObject without encryption
C.The upload succeeds because the bucket has default encryption enabled
D.The upload fails with an access denied error
AnswerD

The condition requires the encryption header to be present and set to AES256; without it, the action is denied.

Why this answer

The IAM policy attached to the SageMaker role includes a condition that denies s3:PutObject unless the request includes the x-amz-server-side-encryption header with a value of 'AES256'. Since the notebook instance attempts to upload without specifying server-side encryption, the condition is not met, and the request is denied with an access denied error. S3 default bucket encryption does not override explicit IAM policy conditions that require encryption headers in the request.

Exam trap

The trap here is that candidates assume S3's default encryption or automatic server-side encryption satisfies the policy condition, but Cisco tests the distinction between bucket-level encryption settings and request-level IAM conditions that require explicit encryption headers.

How to eliminate wrong answers

Option A is wrong because while S3 does automatically encrypt objects at rest via server-side encryption (SSE-S3) by default, the IAM policy explicitly requires the request to include the x-amz-server-side-encryption header; automatic encryption does not satisfy this condition. Option B is wrong because the policy does not deny PutObject without encryption in general; it denies it only when the condition for the encryption header is not met, and the error is access denied, not a failure due to missing encryption. Option C is wrong because bucket default encryption applies server-side encryption at the bucket level, but it does not add the required encryption header to the request; the IAM policy condition evaluates the request headers, not the bucket's default behavior.

313
MCQeasy

A company uses Amazon Bedrock to build a chatbot. The chatbot needs to answer questions based on internal company documents. Which AWS service should be integrated with Bedrock to enable Retrieval Augmented Generation (RAG) without managing infrastructure?

A.Amazon OpenSearch Service
B.Amazon DynamoDB
C.Amazon RDS
D.Amazon Kendra
AnswerD

Kendra provides managed search with connectors to documents, ideal for RAG.

Why this answer

Amazon Kendra is a fully managed intelligent search service that can be directly integrated with Amazon Bedrock to implement Retrieval Augmented Generation (RAG) without any infrastructure management. It indexes internal company documents and retrieves relevant passages, which are then passed to the foundation model as context to generate accurate, grounded answers.

Exam trap

AWS often tests the distinction between managed services that require infrastructure management (like OpenSearch Service) and fully managed services (like Kendra) that abstract away all infrastructure concerns, making candidates incorrectly choose OpenSearch for its search capabilities.

How to eliminate wrong answers

Option A is wrong because Amazon OpenSearch Service requires you to manage clusters, configure indexing, and handle scaling — it is not a serverless, zero-infrastructure option. Option B is wrong because Amazon DynamoDB is a NoSQL key-value and document database designed for transactional workloads, not for semantic search or document retrieval needed in RAG. Option C is wrong because Amazon RDS is a relational database service that requires provisioning and managing database instances, and it lacks native semantic search capabilities for document retrieval.

314
MCQhard

A healthcare company is using Amazon SageMaker to deploy a model that makes predictions on patient data. They need to ensure that the model's predictions are explainable to comply with regulations. Which approach should they take?

A.Use SageMaker Model Monitor to track predictions
B.Use SageMaker Experiments to log model parameters
C.Use SageMaker Clarify to generate feature importance and explanations
D.Use SageMaker Debugger to analyze training gradients
AnswerC

Clarify provides model explainability, including SHAP and partial dependence plots.

Why this answer

SageMaker Clarify is specifically designed to provide model explainability, including feature importance and SHAP-based explanations, which are essential for regulatory compliance in healthcare. It helps stakeholders understand why a model made a particular prediction, addressing transparency requirements.

Exam trap

The AIF-C01 exam often tests the distinction between monitoring (Model Monitor), tracking (Experiments), debugging (Debugger), and explainability (Clarify), so the trap here is confusing operational monitoring with the need for interpretable explanations required by compliance frameworks.

How to eliminate wrong answers

Option A is wrong because SageMaker Model Monitor is used for detecting data drift and model quality degradation over time, not for generating per-prediction explanations. Option B is wrong because SageMaker Experiments tracks and organizes model training runs and parameters, but does not produce explainability reports for individual predictions. Option D is wrong because SageMaker Debugger monitors training metrics and gradients to debug training issues, not to explain model predictions post-deployment.

315
MCQeasy

A data scientist is prototyping a text generation application using Amazon Bedrock. They want to quickly test different foundation models with various prompts and parameters without writing any code. Which AWS service or feature should they use?

A.Amazon Comprehend console
B.AWS Lambda with the Bedrock SDK
C.Amazon Bedrock Playground
D.Amazon SageMaker Studio Notebooks
AnswerC

Bedrock Playground is a no-code console environment for testing models interactively.

Why this answer

Amazon Bedrock Playground provides a no-code interface to experiment with different models, prompts, and parameters. The other options are either not no-code or not part of Bedrock.

316
Multi-Selectmedium

A data scientist is using a pre-trained LLM for a text summarization task. They notice the model sometimes includes hallucinations (false information) in the summaries. Which THREE prompt engineering techniques can help reduce hallucinations? (Select THREE.)

Select 3 answers
A.Increase the max tokens to allow longer summaries
B.Use few-shot prompting with examples that demonstrate accurate summaries
C.Increase the temperature to 0.9 for more creative summaries
D.Use chain-of-thought prompting to encourage the model to reason step-by-step
E.Lower the temperature to a value closer to 0.0
AnswersB, D, E

Providing examples of correct summaries guides the model.

Why this answer

Few-shot prompting (B) provides the model with concrete examples of accurate summaries, establishing a pattern that reduces the likelihood of generating fabricated information. By conditioning the model on high-quality demonstrations, it learns to mimic the factual style and structure, directly mitigating hallucinations.

Exam trap

AWS AI Practitioner exam often tests the misconception that increasing creativity (high temperature) or output length (max tokens) can improve summary quality, when in fact these parameters increase hallucination risk, while low temperature and few-shot examples are the correct mitigations.

317
MCQmedium

A marketing agency wants to analyze customer feedback from social media posts to gauge sentiment. They have no labeled data and limited ML expertise. The team needs a managed service that provides pre-trained models for sentiment analysis without requiring them to train or manage infrastructure. They also need to process text in multiple languages. Which AWS service should they use?

A.Use Amazon Comprehend with its default sentiment analysis model
B.Use Amazon SageMaker to train a custom sentiment analysis model
C.Use AWS Glue to build a custom NLP pipeline
D.Use Amazon Rekognition for text analysis
AnswerA

Comprehend provides pre-trained models that work out of the box for sentiment analysis.

Why this answer

Amazon Comprehend is a fully managed natural language processing (NLP) service that provides pre-trained models for sentiment analysis, key phrase extraction, and language detection. It requires no labeled data, no model training, and no infrastructure management, making it ideal for teams with limited ML expertise. Comprehend natively supports multiple languages, including Spanish, French, German, and many others, directly addressing the requirement to process text in multiple languages.

Exam trap

The trap here is that candidates may confuse Amazon Rekognition (image/video analysis) with text analysis services, or assume that any AWS ML service (like SageMaker or Glue) can handle NLP tasks without recognizing the specific managed service designed for unstructured text.

How to eliminate wrong answers

Option B is wrong because Amazon SageMaker is a platform for building, training, and deploying custom ML models, which requires labeled data, ML expertise, and infrastructure management—contradicting the requirements for a pre-trained, managed service with no training. Option C is wrong because AWS Glue is a serverless data integration and ETL service, not an NLP service; it cannot perform sentiment analysis or provide pre-trained models. Option D is wrong because Amazon Rekognition is a computer vision service for analyzing images and videos, not for text analysis or sentiment detection.

318
MCQmedium

A company uses Amazon Bedrock to generate content and wants to prevent the model from producing harmful or biased responses. Which AWS service should they configure to enforce content safety policies?

A.Amazon Comprehend for toxicity detection
B.Amazon SageMaker Clarify
C.AWS WAF to filter model responses
D.Amazon Bedrock Guardrails
AnswerD

Bedrock Guardrails allows you to define policies to filter harmful content, redact PII, restrict topics, and more.

Why this answer

Amazon Bedrock Guardrails provides content filtering, PII redaction, topic restrictions, and other safety controls. It is purpose-built for content safety in Bedrock.

319
MCQeasy

A developer is creating a generative AI application using Amazon Bedrock and needs to ensure that responses do not include toxic or harmful content. Which feature should be enabled?

A.Amazon CloudWatch Logs for prompt logging.
B.Amazon Virtual Private Cloud (VPC) for network isolation.
C.Amazon Bedrock Guardrails.
D.AWS Identity and Access Management (IAM) policies.
AnswerC

Guardrails enforce content policies, filter toxic content, and block denied topics.

Why this answer

Amazon Bedrock Guardrails is the correct feature because it is specifically designed to enforce content policies, filter toxic or harmful content, and block undesirable topics in generative AI responses. It provides configurable thresholds for hate, insults, sexual content, violence, and other harmful categories, ensuring compliance with safety requirements without modifying the underlying model.

Exam trap

The trap here is that candidates often confuse monitoring/logging services (CloudWatch) or security controls (VPC, IAM) with content safety features, not realizing that Bedrock Guardrails is the only option that directly filters toxic or harmful content at the application layer.

How to eliminate wrong answers

Option A is wrong because Amazon CloudWatch Logs for prompt logging captures and stores logs for monitoring and debugging, but it does not actively filter or block toxic content in responses. Option B is wrong because Amazon Virtual Private Cloud (VPC) provides network isolation and security at the infrastructure layer, but it has no mechanism to inspect or control the semantic content of AI-generated responses. Option D is wrong because AWS Identity and Access Management (IAM) policies control authentication and authorization for API calls, but they cannot enforce content safety rules or filter harmful language in model outputs.

320
MCQeasy

A company is using Amazon SageMaker to train a model. They want to automatically stop training if the model performance stops improving on a validation dataset. Which SageMaker feature should they enable?

A.Early stopping in hyperparameter tuning
B.SageMaker Experiments
C.SageMaker Debugger
D.SageMaker Model Monitor
AnswerA

Early stopping terminates poorly performing training jobs based on validation metrics.

Why this answer

Amazon SageMaker's hyperparameter tuning jobs support an 'early stopping' feature that automatically halts training when the model's performance on the validation dataset ceases to improve. This is enabled by setting the `EarlyStoppingType` parameter to `Auto` or `Off` in the tuning job configuration, which uses algorithms like median stopping or Bayesian optimization to detect convergence and prevent wasted compute.

Exam trap

The AIF-C01 exam often tests the distinction between monitoring (Debugger) and automated stopping (early stopping in hyperparameter tuning), so candidates mistakenly choose Debugger because it 'monitors' performance, but it lacks the built-in auto-stop capability that hyperparameter tuning provides.

How to eliminate wrong answers

Option B is wrong because SageMaker Experiments is a feature for organizing, tracking, and comparing ML runs (e.g., trials and components), not for automatically stopping training based on validation performance. Option C is wrong because SageMaker Debugger monitors training metrics and system resources in real time, but it does not automatically stop training; it can only emit alerts or trigger actions via rules, but stopping requires custom logic or integration with other services. Option D is wrong because SageMaker Model Monitor is designed for detecting data drift and quality issues in deployed models, not for controlling the training lifecycle or stopping training jobs.

321
MCQhard

Refer to the exhibit. A data scientist is trying to run a SageMaker training job that uses training data from an S3 bucket encrypted with the specified KMS key. The training job fails with an access denied error. The IAM role shown is attached to the training job. What is the missing permission?

A.s3:ListBucket
B.kms:GenerateDataKey
C.kms:CreateGrant
D.s3:GetBucketLocation
AnswerC

Required for SageMaker to delegate decrypt permissions to its service roles.

Why this answer

When a SageMaker training job accesses encrypted S3 data, it must be granted permission to use the KMS key for decryption. The `kms:CreateGrant` permission allows SageMaker to create a grant on the KMS key, which is required for the service to decrypt the data on behalf of the user. Without this permission, the training job fails with an access denied error even if other KMS actions are allowed.

Exam trap

The AIF-C01 exam often tests the misconception that `kms:Decrypt` alone is sufficient for SageMaker to access encrypted S3 data, but the service requires `kms:CreateGrant` to create a delegation grant for its internal principal.

How to eliminate wrong answers

Option A is wrong because `s3:ListBucket` is used to list objects in a bucket, not to read or decrypt objects; the error is related to KMS decryption, not listing. Option B is wrong because `kms:GenerateDataKey` is used to create a new data key for encryption, not to decrypt existing data; SageMaker needs `kms:Decrypt` and `kms:CreateGrant` for decryption. Option D is wrong because `s3:GetBucketLocation` is used to retrieve the bucket's region, which is unrelated to KMS decryption permissions.

322
Multi-Selecthard

A company uses a text generation model to produce legal documents. They want to minimize the environmental impact of training and inference. Which THREE approaches should they consider?

Select 3 answers
A.Train the model on a smaller but representative dataset
B.Store all training data in multiple AWS Regions for redundancy
C.Use a more efficient model architecture like a distilled version of a larger model
D.Perform all training on on-demand instances to ensure consistent performance
E.Use Amazon SageMaker with managed spot training to reduce idle compute
AnswersA, C, E

Smaller datasets require less compute for training, reducing energy consumption.

Why this answer

Environmental impact can be reduced by using efficient hardware, smaller models, and managed services that optimize resource usage. These three directly address compute efficiency.

323
Multi-Selecteasy

A company wants to document their machine learning model's intended use, limitations, and ethical considerations. Which TWO practices should they adopt? (Choose two.)

Select 2 answers
A.Create a model card that describes the model's purpose, performance, and fairness metrics
B.Automatically retrain the model weekly
C.Use Amazon SageMaker Model Cards to version and share model documentation
D.Set up Amazon CloudWatch alarms to monitor model accuracy
E.Conduct A/B testing between different model versions
AnswersA, C

Model cards are a standard for transparent AI documentation, covering key aspects.

Why this answer

Model cards provide structured documentation of model details, including intended use and limitations. SageMaker Model Cards support this. Data sheets document datasets.

The other options are not documentation practices.

324
MCQmedium

An e-commerce company uses a recommendation system built with Amazon Personalize. They want to explain to customers why certain products are recommended. Which AWS service can provide model explanations?

A.AWS Config
B.AWS CloudTrail
C.Amazon Detective
D.Amazon SageMaker Clarify
AnswerD

Clarify provides explainability for ML models.

Why this answer

Amazon SageMaker Clarify is the correct choice because it provides model explainability features, including feature importance and SHAP-based explanations, which can be used to interpret why Amazon Personalize recommends specific products. This aligns with the requirement to explain recommendations to customers, as SageMaker Clarify integrates with Personalize to generate human-readable explanations for model predictions.

Exam trap

The trap here is that candidates may confuse AWS services focused on logging or security (like CloudTrail or Detective) with those designed for ML explainability, overlooking that SageMaker Clarify is the dedicated service for model interpretability in the AWS ecosystem.

How to eliminate wrong answers

Option A is wrong because AWS Config is a service for auditing and evaluating resource configurations, not for providing model explanations. Option B is wrong because AWS CloudTrail records API activity for governance and audit purposes, but it does not offer model interpretability or explainability features. Option C is wrong because Amazon Detective is designed for security investigations, analyzing log data to identify root causes of security issues, not for explaining machine learning model predictions.

325
Multi-Selectmedium

Which THREE are SageMaker built-in algorithms suitable for regression tasks?

Select 3 answers
A.Linear Learner
B.K-Means
C.PCA
D.DeepAR
E.XGBoost
AnswersA, D, E

Linear Learner supports regression.

Why this answer

Linear Learner is a SageMaker built-in algorithm that supports both regression and classification tasks. For regression, it models the target variable as a linear combination of input features, optimizing for metrics like mean squared error. It is suitable for regression because it directly outputs continuous values.

Exam trap

The AIF-C01 exam often tests the distinction between supervised and unsupervised algorithms, and the trap here is that candidates may confuse dimensionality reduction (PCA) or clustering (K-Means) with regression tasks, assuming any algorithm that processes numeric data can perform regression.

326
MCQeasy

A data scientist wants to host a pre-trained model on Amazon SageMaker for real-time inference with minimal latency. Which approach should they use?

A.Run inference using AWS Lambda with the model packaged as a container
B.Use SageMaker batch transform
C.Create a SageMaker asynchronous inference endpoint
D.Deploy the model on a SageMaker real-time endpoint
AnswerD

Real-time endpoints are designed for low-latency, synchronous inference.

Why this answer

SageMaker real-time endpoints are designed for low-latency, synchronous inference. They keep the model loaded and ready to respond to individual requests, making them ideal for real-time applications where minimal latency is critical.

Exam trap

The AIF-C01 exam often tests the distinction between synchronous (real-time) and asynchronous inference patterns, and the trap here is that candidates may confuse 'asynchronous inference' with 'real-time' because both can handle requests, but only real-time endpoints guarantee minimal latency for individual predictions.

How to eliminate wrong answers

Option A is wrong because AWS Lambda has a maximum execution timeout of 15 minutes and limited memory (up to 10 GB), making it unsuitable for hosting large pre-trained models that require persistent, low-latency inference. Option B is wrong because SageMaker batch transform is an asynchronous, offline process for processing large datasets in batches, not for real-time inference with minimal latency. Option C is wrong because SageMaker asynchronous inference endpoints are designed for requests with large payloads and longer processing times, where immediate response is not required; they introduce queuing and processing delays that are incompatible with minimal latency requirements.

327
Multi-Selecthard

A data engineer is using Amazon SageMaker Data Wrangler to prepare tabular data for ML. Which THREE data transformations are natively supported? (Choose three.)

Select 3 answers
A.One-hot encoding for categorical features
B.Audio feature extraction
C.Text vectorization using TF-IDF
D.Custom Python code via Pandas or Spark
E.Image resizing and normalization
AnswersA, C, D

One-hot encoding is a built-in transform in Data Wrangler.

Why this answer

Amazon SageMaker Data Wrangler includes built-in support for one-hot encoding as a native transformation for categorical features. This transformation automatically creates binary columns for each category, which is essential for preparing tabular data for machine learning models that require numerical input.

Exam trap

AWS often tests the distinction between natively supported transformations in SageMaker Data Wrangler versus those requiring external services or custom scripts, leading candidates to mistakenly select audio or image processing options that are not part of Data Wrangler's built-in capabilities.

328
Multi-Selectmedium

Which AWS services can be used to build, train, and deploy custom machine learning models? (Choose two.)

Select 2 answers
A.Amazon Polly
B.Amazon Lex
C.AWS Deep Learning AMIs
D.Amazon Rekognition
E.Amazon SageMaker
AnswersC, E

Deep Learning AMIs provide a customizable environment for building and training models.

Why this answer

AWS Deep Learning AMIs (C) are pre-configured Amazon Machine Images that include popular deep learning frameworks (TensorFlow, PyTorch, MXNet) and GPU drivers, allowing you to build, train, and deploy custom ML models on EC2 instances. Amazon SageMaker (E) is a fully managed service that provides end-to-end capabilities for building, training, and deploying custom ML models at scale, with built-in algorithms, automatic model tuning, and one-click deployment.

Exam trap

The trap here is that candidates confuse pre-built AI services (Polly, Lex, Rekognition) with platforms that allow custom model development, leading them to select services that only consume pre-trained models rather than build and train custom ones.

329
MCQeasy

A media company uses Amazon Transcribe for automatic speech recognition. They discover the model has higher error rates for non-native English speakers. Which Responsible AI principle are they failing to uphold?

A.Fairness
B.Explainability
C.Robustness
D.Privacy
AnswerA

Fairness addresses disparate impact.

Why this answer

The model's higher error rates for non-native English speakers indicate a bias in the training data or model design that leads to disparate performance across demographic groups. This directly violates the Fairness principle of Responsible AI, which requires that AI systems treat all groups equitably and do not amplify existing societal biases. Amazon Transcribe's underlying acoustic and language models may have been trained predominantly on native English speech, causing systematic underperformance for non-native accents.

Exam trap

AWS often tests the distinction between Fairness and Robustness, where candidates mistakenly attribute performance disparities to a lack of robustness rather than recognizing it as a fairness issue stemming from biased training data.

How to eliminate wrong answers

Option B (Explainability) is wrong because the issue is not about the model's inability to explain its decisions, but about biased outcomes across different speaker groups. Option C (Robustness) is wrong because robustness concerns the system's resilience to adversarial inputs or noise, not its fairness across demographic groups. Option D (Privacy) is wrong because the problem does not involve unauthorized data access or exposure of personal information; it is a performance disparity unrelated to data protection.

330
MCQmedium

A company is using Amazon Bedrock to generate marketing copy. They want to evaluate the quality of the generated text. Which metric is MOST suitable for assessing the relevance and coherence of the content?

A.Accuracy
B.ROUGE-N
C.Perplexity
D.BLEU score
AnswerB

ROUGE-N compares n-gram overlap, suitable for summarization and copy.

Why this answer

ROUGE-N (Recall-Oriented Understudy for Gisting Evaluation) measures the overlap of n-grams between generated text and reference text, making it suitable for assessing relevance and coherence in content generation tasks like marketing copy. It evaluates how well the generated text captures key phrases and maintains logical flow, which aligns with the need to assess content quality beyond simple factual accuracy.

Exam trap

AWS often tests the distinction between metrics designed for translation (BLEU) versus summarization/generation (ROUGE), leading candidates to mistakenly choose BLEU for coherence evaluation when ROUGE is the correct choice for recall-based content assessment.

How to eliminate wrong answers

Option A is wrong because Accuracy is a classification metric (e.g., correct predictions/total predictions) and does not measure text relevance or coherence; it is irrelevant for generative text evaluation. Option C is wrong because Perplexity measures how well a language model predicts a sequence (lower is better for fluency) but does not directly assess relevance or coherence against a reference; it is a model-internal metric, not a quality metric for generated content. Option D is wrong because BLEU score (Bilingual Evaluation Understudy) is primarily designed for machine translation, focusing on precision of n-gram matches, and is less sensitive to recall and coherence in single-language text generation tasks like marketing copy.

331
Multi-Selecthard

Which TWO practices help ensure responsible AI when deploying generative AI applications? (Select TWO.)

Select 2 answers
A.Deploy the model without any content filters to maximize creativity
B.Increase model size to improve accuracy at the expense of interpretability
C.Use only synthetic data for training to avoid privacy issues
D.Implement guardrails to filter harmful or inappropriate content
E.Monitor the model's outputs for bias and drift over time
AnswersD, E

Guardrails like Amazon Bedrock Guardrails help enforce content policies and prevent harmful outputs.

Why this answer

Implementing guardrails (e.g., content filtering) to prevent harmful outputs (D) and continuously monitoring outputs for bias and drift (E) are essential responsible AI practices. Deploying without filters (A) is unsafe, increasing model size (B) reduces interpretability and doesn't address responsibility, and using only synthetic data (C) can introduce bias and is impractical. The correct answers are D and E.

332
MCQhard

A company uses Amazon Bedrock to generate code. They want to ensure the code follows security best practices and does not contain vulnerabilities. Which approach is most effective?

A.Implement a post-processing step using AWS WAF.
B.Use Amazon CodeGuru Security to review generated code.
C.Train a custom model on the company’s secure code.
D.Use a foundation model trained only on secure code.
AnswerB

CodeGuru Security automatically scans code for vulnerabilities and provides actionable recommendations.

Why this answer

Amazon CodeGuru Security reviews code for security vulnerabilities and provides recommendations. Using a model trained on secure code may not be sufficient; WAF is for web traffic; training a custom model requires significant effort and may not catch all issues.

333
Multi-Selecthard

An organization is implementing governance for machine learning models using SageMaker. They need to track model versions, monitor for drift after deployment, and automatically decommission models that have been deprecated for over 30 days. Which THREE services or features should they use?

Select 3 answers
A.Amazon SageMaker Ground Truth
B.Amazon SageMaker Clarify
C.Amazon SageMaker Model Registry
D.Amazon SageMaker Projects (MLOps templates)
E.Amazon SageMaker Model Monitor
AnswersC, D, E

Model Registry manages model versions and lifecycle stages.

Why this answer

SageMaker Model Registry tracks versions, Model Monitor detects drift, and SageMaker Projects with MLOps can automate decommissioning. Clarify is for bias, not lifecycle management. Ground Truth is for labeling.

334
Multi-Selectmedium

A healthcare startup is deploying an AI system to assist in diagnosing skin conditions from images. They want to follow the NIST AI Risk Management Framework. Which THREE practices should they implement?

Select 3 answers
A.Use Amazon SageMaker to continuously monitor model performance and retrain as needed
B.Document the model's intended use, performance, and limitations in a model card
C.Establish a human-in-the-loop process for uncertain diagnoses
D.Archive all training data in Amazon S3 Glacier for long-term retention
E.Deploy the model on AWS Lambda for serverless inference
AnswersA, B, C

Continuous monitoring is part of risk management to detect and address issues over time.

Why this answer

The NIST AI RMF emphasizes governance, transparency, and risk management. Documenting model cards, establishing human oversight, and continuous monitoring align with these principles.

335
Multi-Selectmedium

Which TWO actions are best practices when deploying foundation models on Amazon SageMaker for production? (Choose TWO.)

Select 2 answers
A.Manually warm up endpoints by sending dummy requests before traffic spikes.
B.Create a separate endpoint for each model to isolate traffic.
C.Use multi-model endpoints (MMEs) to serve multiple models on a single instance.
D.Implement inference pipelines to handle preprocessing and postprocessing steps separately.
E.Deploy models directly to production without load testing to avoid delays.
AnswersC, D

MMEs optimize resource utilization and reduce costs for multiple models.

Why this answer

Amazon SageMaker Multi-Model Endpoints (MMEs) allow you to host multiple models on a single instance, which reduces hosting costs by sharing resources across models while still providing low-latency inference. This is a best practice for production deployments where you need to serve many models efficiently without provisioning separate endpoints for each.

Exam trap

AWS often tests the misconception that manual endpoint warm-up is necessary for production traffic spikes, but SageMaker's auto-scaling and built-in health checks handle this automatically, making option A a common distractor.

336
Multi-Selecthard

A company is developing an AI system for resume screening. They want to ensure fairness and reduce bias. Which THREE steps should they take in accordance with the NIST AI Risk Management Framework and AWS responsible AI principles?

Select 3 answers
A.Establish a governance process for regular auditing and human review of decisions
B.Measure bias metrics across demographic groups using SageMaker Clarify
C.Optimize the model solely for overall accuracy
D.Ensure the training data includes diverse representation across demographic groups
E.Remove all sensitive attributes (e.g., gender, race) from the dataset
AnswersA, B, D

Governance and human oversight are critical for responsible AI, as emphasized in the NIST framework.

Why this answer

The NIST AI Risk Management Framework emphasizes measuring bias, ensuring diverse data, and establishing governance. Removing sensitive features alone is insufficient due to proxy correlations. Relying solely on accuracy ignores fairness.

The three correct steps cover measurement, data diversity, and governance.

337
MCQmedium

Refer to the exhibit. A user invokes Claude v2 using the AWS CLI. The response is truncated. What is the most likely cause?

A.The AWS CLI is missing the --endpoint-url parameter.
B.The max_tokens_to_sample is too low.
C.The model does not support this use case.
D.The prompt includes a stop sequence 'Assistant:'.
AnswerD

Claude uses 'Assistant:' as a stop sequence, causing it to stop generating after its response.

Why this answer

The prompt includes the stop sequence 'Assistant:', which causes the model to halt generation as soon as it encounters that token sequence. In Claude v2, stop sequences are used to control the output length and structure; when the model generates the exact stop sequence, it truncates the response at that point, even if more content could have been produced.

Exam trap

The AIF-C01 exam often tests the distinction between token limits and stop sequences, where candidates mistakenly attribute truncation to max_tokens_to_sample when the actual cause is a configured stop sequence in the prompt or API parameters.

How to eliminate wrong answers

Option A is wrong because the --endpoint-url parameter is used to specify a custom endpoint for the AWS CLI, but its absence does not cause response truncation; it would instead result in a connection error or default endpoint usage. Option B is wrong because max_tokens_to_sample controls the maximum number of tokens the model can generate, but if it were too low, the response would be cut off at that token limit, not at a specific stop sequence; the question states the response is truncated, not that it reached a token limit. Option C is wrong because Claude v2 supports a wide range of use cases including text generation, and the model's capability is not the cause of truncation; truncation is explicitly controlled by stop sequences or token limits.

338
MCQeasy

A company uses Amazon Bedrock to generate product descriptions. They notice that the output sometimes contains incorrect information. What should they do to improve accuracy?

A.Increase the temperature parameter.
B.Implement Retrieval-Augmented Generation (RAG).
C.Use a larger foundation model.
D.Use AWS WAF to filter outputs.
AnswerB

RAG retrieves relevant information from a knowledge base to augment the prompt, improving factual accuracy.

Why this answer

Retrieval-Augmented Generation (RAG) enhances the accuracy of foundation model outputs by grounding the generation in authoritative, up-to-date external knowledge sources. Instead of relying solely on the model's parametric memory, RAG retrieves relevant documents or data from a vector database (e.g., Amazon OpenSearch Serverless) and injects them into the prompt context, reducing hallucinations and incorrect information in product descriptions.

Exam trap

AWS often tests the misconception that simply using a larger or more powerful model (Option C) is the universal fix for accuracy issues, when in fact the root cause of hallucinations is often a lack of grounded, retrievable context that RAG specifically addresses.

How to eliminate wrong answers

Option A is wrong because increasing the temperature parameter makes the model's output more random and creative, which would likely increase, not decrease, the frequency of incorrect information. Option C is wrong because using a larger foundation model does not inherently fix factual accuracy; larger models can still hallucinate or produce outdated information without access to current or domain-specific data. Option D is wrong because AWS WAF is a web application firewall that filters HTTP traffic for security threats (e.g., SQL injection, XSS) and has no mechanism to validate or correct the factual accuracy of generated text.

339
MCQmedium

Refer to the exhibit. A company sets up a knowledge base for a customer support chatbot using Amazon Bedrock. Users report that the chatbot misses relevant details from long documents. Which change to the data source configuration would most likely improve retrieval?

A.Increase the chunk size in FIXED_SIZE chunking
B.Change chunking strategy to SEMANTIC
C.Add more documents to the S3 bucket
D.Change the embedding model to a larger one
AnswerB

Semantic chunking groups related content, preserving context and improving retrieval accuracy.

Why this answer

Semantic chunking groups text based on meaning rather than fixed token counts, preserving the natural boundaries of concepts and paragraphs. This ensures that relevant details from long documents remain intact within a single chunk, improving retrieval accuracy for the chatbot.

Exam trap

AWS often tests the misconception that simply increasing chunk size or using a larger embedding model will improve retrieval, when the real bottleneck is the chunking strategy's ability to preserve semantic coherence.

How to eliminate wrong answers

Option A is wrong because increasing the chunk size in FIXED_SIZE chunking can cause chunks to contain multiple unrelated topics, diluting the semantic focus and making retrieval less precise. Option C is wrong because adding more documents to the S3 bucket does not address the core issue of poor chunking; it may even introduce more noise if the chunking strategy remains suboptimal. Option D is wrong because changing the embedding model to a larger one may improve representation quality but does not fix the fundamental problem of how documents are split; poorly chunked content will still lose relevant details regardless of the embedding model.

340
MCQeasy

A company wants to build a generative AI application that can summarize customer support tickets. They need to ensure the model stays up-to-date with the latest product documentation without retraining. Which AWS service would best support this requirement?

A.Amazon Bedrock with Retrieval Augmented Generation (RAG)
B.Amazon Comprehend
C.Amazon Rekognition
D.Amazon SageMaker Ground Truth
AnswerA

Amazon Bedrock supports RAG, which enables the model to retrieve current information from a knowledge base, keeping summaries up-to-date without retraining.

Why this answer

Amazon Bedrock with Retrieval Augmented Generation (RAG) is the correct choice because it allows the generative AI model to access and incorporate the latest product documentation from an external knowledge base without retraining. RAG works by retrieving relevant document chunks at inference time and injecting them into the model's context, ensuring responses reflect current information. This directly meets the requirement for staying up-to-date with evolving documentation while avoiding the cost and latency of full model retraining.

Exam trap

The trap here is that candidates may confuse Amazon Comprehend's text analysis capabilities (like summarization via extractive methods) with generative AI summarization, overlooking that Comprehend cannot incorporate external, dynamic knowledge sources without retraining.

How to eliminate wrong answers

Option B (Amazon Comprehend) is wrong because it is a natural language processing (NLP) service for extracting insights like sentiment, entities, and key phrases from text, but it does not provide generative AI summarization capabilities or a mechanism to dynamically incorporate updated documentation. Option C (Amazon Rekognition) is wrong because it is a computer vision service for analyzing images and videos, not for processing text-based customer support tickets or integrating with product documentation. Option D (Amazon SageMaker Ground Truth) is wrong because it is a data labeling service used to create training datasets for machine learning models, not a generative AI service that can summarize text or retrieve real-time information from external sources.

341
MCQeasy

A developer wants to experiment with a foundation model for code generation without writing any code. Which AWS service provides a playground for models like CodeWhisperer?

A.Amazon CodeGuru
B.AWS Lambda
C.Amazon SageMaker Studio
D.Amazon Bedrock Playground
AnswerD

Bedrock provides a no-code playground to test models like Claude or CodeWhisperer.

Why this answer

Amazon Bedrock Playground is the correct answer because it provides a web-based interface for experimenting with foundation models (FMs) from providers like AI21 Labs, Anthropic, Cohere, Meta, Stability AI, and Amazon itself, including the CodeWhisperer model for code generation. This allows the developer to test prompts, adjust parameters, and see model responses without writing any code, directly fulfilling the requirement of a no-code playground.

Exam trap

The trap here is that candidates may confuse Amazon SageMaker Studio (a full ML development environment) with a no-code playground, overlooking that Bedrock Playground is specifically designed for zero-code experimentation with foundation models like CodeWhisperer.

How to eliminate wrong answers

Option A is wrong because Amazon CodeGuru is a service for automated code reviews and application profiling, not a playground for experimenting with foundation models or code generation. Option B is wrong because AWS Lambda is a serverless compute service for running code in response to events, not a no-code environment for testing foundation models. Option C is wrong because Amazon SageMaker Studio is an integrated development environment (IDE) for building, training, and deploying machine learning models, which typically requires writing code (e.g., Python notebooks) and is not a simple playground for foundation model experimentation without coding.

342
Multi-Selecthard

An AWS AI practitioner is designing a document processing pipeline using Amazon Textract and Amazon Comprehend. The pipeline must extract text from PDFs, detect entities, and classify documents into categories (e.g., invoice, contract, report). Which THREE steps should be included in the pipeline? (Choose three.)

Select 3 answers
A.Use Amazon Comprehend to train a custom classifier for document type
B.Use Amazon Personalize to recommend document categories
C.Use Amazon Textract to extract text from the PDF
D.Use Amazon Comprehend to detect entities such as dates and amounts
E.Use Amazon Rekognition to analyze images in the PDF
AnswersA, C, D

Comprehend allows training custom classifiers for document categorization.

Why this answer

Amazon Comprehend allows you to train a custom classifier using your own labeled data to categorize documents into types like invoice, contract, or report. This is essential for the pipeline's classification step, as it enables the system to automatically assign a document category based on the extracted text.

Exam trap

The trap here is confusing Amazon Personalize (a recommendation engine) with Amazon Comprehend (a natural language processing service) for classification tasks, and assuming Amazon Rekognition can extract text from PDFs when that is the role of Amazon Textract.

343
MCQmedium

A government agency is deploying an AI system to detect fraudulent benefit claims. The system uses a neural network trained on historical claims data, which includes a disproportionate number of false positives from a particular ethnic group due to historical over-policing. The agency must ensure the system does not perpetuate discrimination. They have a rigorous testing procedure but limited budget. The project lead wants to balance fairness with detection performance. Which combination of steps should they prioritize?

A.Remove the race feature from the model and rely on performance metrics alone
B.Replace the neural network with a logistic regression model retrained on the same data
C.Rebalance the training data to have equal representation across groups and evaluate using a fairness metric like equal opportunity
D.Use a post-hoc explainability tool to identify biased predictions and manually override them
AnswerC

Rebalancing data and using fairness metrics directly mitigate bias and measure progress.

Why this answer

The most effective approach is to rebalance the training data to be more representative and to use a fairness metric, such as equal opportunity, during evaluation. This directly addresses the data bias and quantifies fairness. Excluding race features may still leave proxies.

Using a simpler model may not eliminate bias if data is biased. Post-hoc explanations help understand bias but do not fix it.

344
Multi-Selectmedium

Which TWO techniques are commonly used to prevent overfitting in machine learning models? (Select TWO.)

Select 2 answers
A.Add more irrelevant features
B.Use cross-validation
C.Increase model complexity
D.Reduce the amount of training data
E.Use regularization
AnswersB, E

Cross-validation helps assess model generalization and can indicate overfitting.

Why this answer

Cross-validation helps prevent overfitting by partitioning the training data into multiple folds, training the model on different subsets, and validating on held-out portions. This provides a more robust estimate of model performance on unseen data and reduces the risk of memorizing noise in a single train-test split.

Exam trap

AWS often tests the misconception that adding more data or features always helps model performance, when in fact irrelevant features or reducing training data can worsen overfitting, and candidates may incorrectly associate 'more complexity' with better generalization.

345
MCQeasy

A company builds an AI system that generates medical diagnoses. To ensure patient safety and allow oversight, the company wants a human to review all high-risk predictions before they are acted upon. Which AWS service should they use?

A.AWS Lambda
B.Amazon SageMaker Ground Truth
C.Amazon Augmented AI (A2I)
D.AWS Step Functions
AnswerC

A2I integrates with SageMaker or other ML services to route predictions for human review when confidence is low or other conditions are met.

Why this answer

Amazon Augmented AI (A2I) enables human review workflows for ML predictions, allowing you to define conditions that trigger human review. SageMaker Ground Truth is for data labeling, not review workflows.

346
MCQhard

An ML engineer wants to store training data in a format optimized for linear data scanning and columnar access in SageMaker. Which format is most appropriate?

A.JSON
B.Image (JPEG/PNG)
C.Parquet
D.CSV
AnswerC

Parquet is columnar and optimized for analytical queries.

Why this answer

Parquet is a columnar storage format optimized for both linear data scanning and columnar access, making it ideal for training data in SageMaker. It reduces I/O by storing data by columns rather than rows, enabling efficient retrieval of specific features during model training.

Exam trap

AWS often tests the misconception that CSV is the most efficient format for training data, but Parquet's columnar storage and compression provide superior performance for linear scanning and columnar access in distributed ML pipelines.

How to eliminate wrong answers

Option A is wrong because JSON is a row-oriented text format that requires full parsing for columnar access, leading to high I/O overhead and slower linear scans. Option B is wrong because image formats like JPEG/PNG are binary and designed for visual data, not structured tabular data, and lack columnar access capabilities. Option D is wrong because CSV is a row-oriented text format that, while simple, requires scanning entire rows to access specific columns and lacks compression and schema optimization.

347
MCQhard

A company uses Amazon SageMaker to host a model for fraud detection. The model must be re-evaluated for bias on a monthly basis. Which SageMaker feature can be used to detect bias in a trained model?

A.SageMaker Debugger
B.SageMaker Model Monitor
C.SageMaker Clarify
D.SageMaker Autopilot
AnswerC

Clarify provides bias detection and explainability.

Why this answer

SageMaker Clarify is the correct choice because it is specifically designed to detect bias in machine learning models and data. It provides built-in capabilities to evaluate bias metrics (e.g., difference in positive proportions, disparate impact) both before training (pre-training bias) and after training (post-training bias), making it suitable for the monthly re-evaluation requirement.

Exam trap

The trap here is that candidates confuse SageMaker Model Monitor (which monitors data drift) with bias detection, but Model Monitor does not evaluate model fairness or bias metrics.

How to eliminate wrong answers

Option A is wrong because SageMaker Debugger is used for monitoring training jobs in real time to detect issues like vanishing gradients or overfitting, not for bias detection. Option B is wrong because SageMaker Model Monitor focuses on detecting data drift and quality issues in deployed endpoints, not on evaluating model bias. Option D is wrong because SageMaker Autopilot automates the process of building, training, and tuning models, but it does not include built-in bias detection capabilities.

348
MCQmedium

A team is using Amazon SageMaker to deploy a real-time inference endpoint. The endpoint must be accessible only from a specific IP range and must automatically scale based on request volume. Which configuration meets these requirements?

A.Deploy the endpoint in a public subnet with a security group allowing the IP range.
B.Configure the endpoint with a VPC and attach a security group that allows inbound traffic from the IP range, and enable automatic scaling for the endpoint.
C.Deploy the endpoint with a VPC and use a Network Load Balancer with target group health checks.
D.Deploy the endpoint with an AWS WAF ACL to filter by IP and enable auto scaling for the endpoint.
AnswerB

VPC security group restricts by IP and automatic scaling handles demand.

Why this answer

Amazon SageMaker endpoints can be deployed within a VPC, allowing you to attach a security group that restricts inbound traffic to a specific IP range. Additionally, SageMaker supports automatic scaling for real-time endpoints using Application Auto Scaling, which adjusts the number of instances based on request volume metrics like InvocationsPerInstance.

Exam trap

The trap here is that candidates often confuse network-level access control (security groups in a VPC) with application-layer filtering (AWS WAF) or assume that a public subnet with a security group is sufficient, not realizing that SageMaker endpoints in a public subnet are still internet-facing and cannot be restricted to a specific IP range without a VPC.

How to eliminate wrong answers

Option A is wrong because deploying the endpoint in a public subnet exposes it to the internet, and a security group alone cannot restrict access to a specific IP range if the endpoint is publicly accessible; SageMaker endpoints in public subnets are not supported for IP-based restriction without a VPC. Option C is wrong because while a Network Load Balancer (NLB) can provide health checks and distribute traffic, SageMaker endpoints do not require an NLB for IP-based access control or scaling; the VPC and security group configuration already handles access control, and NLB is not a standard component for SageMaker endpoint deployment. Option D is wrong because AWS WAF is a web application firewall that operates at the application layer (HTTP/HTTPS) and is typically associated with API Gateway or CloudFront, not directly with SageMaker endpoints; SageMaker endpoints do not natively integrate with AWS WAF for IP filtering, and using WAF would not replace the need for VPC-based network controls.

349
MCQhard

A healthcare company wants to use generative AI to automatically generate patient summary reports from electronic health records (EHRs). The solution must be HIPAA compliant and data must not leave AWS. They plan to use Amazon Bedrock with a foundation model. The EHR data is stored in Amazon S3 and contains protected health information (PHI). Which approach best meets compliance requirements?

A.Use Amazon Bedrock with a HIPAA-eligible account, enable encryption with KMS, and de-identify PHI in the prompt
B.Use a publicly available foundation model API outside AWS for better accuracy
C.Use Amazon Comprehend Medical for entity extraction and then feed results into a model on Amazon Bedrock without de-identification
D.Use Amazon SageMaker with a public model from the internet without encryption
AnswerA

Bedrock is HIPAA-eligible when used with AWS Organizations and BAA; de-identification and KMS encryption protect PHI.

Why this answer

Amazon Bedrock operates within a HIPAA-eligible environment when configured appropriately, and using AWS KMS for encryption and not storing PHI in prompts (using de-identification) can maintain compliance. Using public models or non-HIPAA services would violate requirements. SageMaker with encryption can also be HIPAA-eligible, but Bedrock with proper settings is simpler.

350
MCQeasy

An ML team notices that the training accuracy is 99% but validation accuracy is only 72%. Which concept best describes this situation?

A.Cross-validation error
B.Overfitting
C.Bias-variance tradeoff
D.Underfitting
AnswerB

Large gap between high training accuracy and lower validation accuracy is classic overfitting.

Why this answer

The model achieves 99% accuracy on training data but only 72% on validation data, which is a classic symptom of overfitting. Overfitting occurs when the model learns noise and specific patterns in the training set too well, failing to generalize to unseen data. This is often caused by excessive model complexity, such as too many layers in a neural network or too deep a decision tree, relative to the amount of training data.

Exam trap

AWS often tests the distinction between overfitting and the bias-variance tradeoff, where candidates may confuse the tradeoff as the direct answer instead of recognizing that the specific symptom (high training accuracy, low validation accuracy) is the definition of overfitting.

How to eliminate wrong answers

Option A is wrong because cross-validation error is a technique used to estimate model performance by partitioning data into folds, not a description of the training-validation accuracy gap itself. Option C is wrong because the bias-variance tradeoff is a broader concept that explains the relationship between model complexity and error, but the specific situation of high training accuracy and low validation accuracy is directly overfitting, not just a tradeoff. Option D is wrong because underfitting would show low accuracy on both training and validation sets (e.g., both below 70%), not high training accuracy with a large gap.

351
MCQmedium

A company uses Amazon Bedrock Agents to automate order processing. The agent needs to call an internal database to check inventory. Which component should be used to integrate the database query?

A.Knowledge base
B.Action group
C.Guardrail
D.Prompt template
AnswerB

Correct. Action groups enable agents to invoke external systems via Lambda.

Why this answer

Bedrock Agents use action groups to define external tools or APIs. Each action group has an associated AWS Lambda function that performs the actual work (e.g., querying a database). The agent can call the action group via natural language instructions.

352
MCQmedium

A machine learning engineer notices that a SageMaker training job failed due to insufficient permissions to access a KMS-encrypted S3 bucket. The training job's IAM role has S3 access permissions. What should be done to resolve the issue?

A.Create a new KMS key and re-encrypt the data
B.Assign the SageMakerFullAccess policy to the role
C.Add a kms:Decrypt permission to the IAM role for the specific KMS key used to encrypt the S3 bucket
D.Change the S3 bucket's default encryption to S3-managed keys (SSE-S3)
AnswerC

The role needs decryption permissions to access the encrypted data.

Why this answer

The training job failed because the IAM role lacks permission to decrypt the KMS key used for S3 server-side encryption. Even with S3 access permissions, SageMaker cannot read encrypted objects without the kms:Decrypt action on the specific KMS key. Adding kms:Decrypt to the role's policy for that key resolves the issue.

Exam trap

The trap here is that candidates assume S3 permissions alone are sufficient, overlooking that KMS-encrypted objects require explicit kms:Decrypt permissions on the IAM role, not just S3 bucket policies or managed policies like SageMakerFullAccess.

How to eliminate wrong answers

Option A is wrong because creating a new KMS key and re-encrypting the data is unnecessary and disruptive; the existing key can be used if the IAM role is granted the proper decrypt permission. Option B is wrong because SageMakerFullAccess is an AWS managed policy that does not include KMS permissions for customer-managed keys; it only grants basic SageMaker and S3 access, so it would not resolve the KMS decryption failure. Option D is wrong because changing the bucket's default encryption to SSE-S3 removes KMS encryption, which may violate security or compliance requirements, and is an overreaction when a simple IAM permission update can fix the issue.

353
Multi-Selecthard

A healthcare startup is deploying an AI model to assist with diagnosis. They want to comply with the EU AI Act, which classifies medical AI as high-risk. Which THREE requirements must they fulfill? (Choose three.)

Select 3 answers
A.Provide technical documentation and logs for traceability
B.Establish a risk management system throughout the AI system's lifecycle
C.Ensure human oversight to prevent or minimize risks
D.Minimize the amount of training data to only necessary data
E.Allow the model to make final decisions without human review
AnswersA, B, C

High-risk AI systems must be transparent with documentation and logging for traceability.

Why this answer

The EU AI Act for high-risk systems requires risk management, human oversight, and transparency including documentation. Data minimization is a GDPR principle, not specific to the AI Act; automated decisions without human review are not allowed for high-risk.

354
MCQeasy

Which of the following is a key advantage of using a pre-trained foundation model over training a model from scratch?

A.Reduces the amount of labeled data and compute resources needed
B.Eliminates the need for any fine-tuning
C.Guarantees perfect accuracy on domain-specific tasks
D.Allows the model to work offline without any cloud infrastructure
AnswerA

Transfer learning from a pre-trained model drastically reduces data and compute requirements.

Why this answer

Pre-trained foundation models, such as those based on transformer architectures, have already learned general language patterns from vast, diverse datasets during their initial training. This transfer learning approach drastically reduces the need for large amounts of labeled data and extensive compute resources when adapting the model to a specific downstream task, as only a relatively small fine-tuning step is required.

Exam trap

The trap here is that candidates may assume pre-trained models are 'plug-and-play' and require no further training, but the exam tests the understanding that fine-tuning is a critical step to adapt the model to specific tasks, not an optional or eliminable one.

How to eliminate wrong answers

Option B is wrong because fine-tuning is almost always necessary to adapt a pre-trained foundation model to a specific domain or task; the model's general knowledge must be specialized, and eliminating fine-tuning would result in poor performance on domain-specific tasks. Option C is wrong because no model, including pre-trained foundation models, can guarantee perfect accuracy on any task due to inherent biases, data limitations, and the stochastic nature of model outputs. Option D is wrong because pre-trained foundation models typically require cloud infrastructure or powerful local hardware for inference due to their large size and computational demands; they cannot simply work offline without any infrastructure.

355
MCQmedium

A company wants to use a third-party foundation model from Amazon Bedrock but is concerned about data privacy because the model provider might store prompts and responses. How should they address this concern?

A.Enable Amazon Bedrock model invocation logging to capture all interactions
B.Review the third-party model provider's data handling policy and choose a model that does not retain data
C.Use Amazon Macie to scan prompts before they are sent
D.Use AWS KMS to encrypt the prompts and responses before sending to the model
AnswerB

The provider's policy governs data retention; choosing a compliant model is the best approach.

Why this answer

Each third-party model provider in Bedrock has its own data handling policies. Customers should review those policies and can choose models that do not store data or use Bedrock features like Guardrails to redact sensitive data. However, the direct action is to review the provider's policy and select a model that meets privacy requirements.

356
Multi-Selecteasy

A data scientist needs to use Amazon SageMaker to train a model and must ensure that the training data and the model artifacts are encrypted using customer-managed KMS keys. Which TWO resources can be encrypted with KMS keys in this scenario? (Select TWO.)

Select 2 answers
A.SageMaker ML storage volume (attached to training instances)
B.SageMaker notebook instances
C.Amazon SageMaker Model Registry
D.Amazon CloudWatch Logs
E.S3 buckets storing training data
AnswersA, E

SageMaker encrypts the local storage volume using a KMS key.

Why this answer

SageMaker can use KMS keys to encrypt the ML storage volume (attached to training instances) and S3 buckets storing training data. Model artifacts in S3 can also be encrypted with KMS.

357
Multi-Selecthard

A financial services company is deploying a large language model (LLM) on Amazon Bedrock for customer-facing applications. The compliance team mandates that the model must not generate any content containing personally identifiable information (PII). Additionally, the company wants to ensure that the model only answers questions related to its product documentation and refuses off-topic queries. Which THREE Bedrock Guardrails configurations should be applied?

Select 3 answers
A.Denied topics
B.PII redaction
C.Word filters
D.Grounding check
E.Content filters
AnswersA, B, E

Define topics the model should not discuss, such as off-topic queries.

Why this answer

To prevent PII leakage, enable PII redaction. To restrict to product documentation, use topic restrictions (denied topics for off-topic). To prevent harmful content, use content filters.

Word filters are for specific words, and grounding check is for hallucination prevention but not directly for topic restriction.

358
MCQeasy

In a binary classification problem, the model predicts majority class for all inputs. What is this issue called?

A.High bias
B.Overfitting
C.High variance
D.Underfitting
AnswerA

Predicting majority class for all inputs indicates the model has high bias and is underfitting.

Why this answer

When a model predicts the majority class for all inputs, it indicates that the model is too simplistic and fails to capture the underlying patterns in the data. This is a classic symptom of high bias, where the model makes strong assumptions about the data distribution, leading to systematic underperformance on the minority class. In machine learning, high bias often results from an overly simple algorithm or insufficient model capacity, causing the model to underfit the training data.

Exam trap

The AIF-C01 exam often tests the distinction between 'high bias' and 'underfitting' as separate concepts, where underfitting is the symptom and high bias is the cause, so candidates may incorrectly select underfitting when the question explicitly asks for the name of the issue.

How to eliminate wrong answers

Option B (Overfitting) is wrong because overfitting occurs when the model learns noise and details from the training data too well, resulting in high variance and poor generalization, not a constant prediction of the majority class. Option C (High variance) is wrong because high variance typically leads to models that are overly sensitive to small fluctuations in the training data, producing different predictions for similar inputs, not a uniform majority class output. Option D (Underfitting) is a related concept but is not the specific term for the issue described; underfitting refers to the model's inability to capture the training data's patterns, which can cause high bias, but the question asks for the name of the issue itself, which is high bias.

359
MCQhard

An organization uses AWS Lake Formation to govern access to data used for machine learning in Amazon SageMaker. They want to ensure that a particular IAM role used by SageMaker can only query a subset of columns in a table containing sensitive customer data. Which Lake Formation permission should be granted to the role?

A.Grant DESCRIBE on the table
B.Grant INSERT on the table
C.Create a view with only the allowed columns and grant SELECT on the view
D.Grant SELECT on the table with column-level filter
AnswerD

Lake Formation allows granting SELECT on specific columns, achieving column-level access control.

Why this answer

Lake Formation supports column-level permissions via Data Permissions. You can grant SELECT permission on specific columns of a table to an IAM role, restricting access to only those columns.

360
MCQmedium

A company uses Amazon SageMaker Ground Truth to label a dataset for a binary classifier. To reduce labeling bias, which workforce configuration is most appropriate?

A.Automatic labeling with Active Learning
B.Public workforce with no qualification
C.Private workforce of domain experts
D.Vendor managed workforce
AnswerC

Domain experts provide high-quality, consistent labels, reducing bias.

Why this answer

A private workforce of domain experts ensures that labeling is performed by individuals with deep knowledge of the data domain, which directly reduces labeling bias. Domain experts are less likely to misinterpret ambiguous data points and can apply consistent, informed judgment, thereby minimizing systematic errors that could skew the binary classifier's training data.

Exam trap

A common mistake is assuming that automated or crowd-sourced labeling is always less biased or more efficient. In AWS SageMaker Ground Truth, for specialized tasks, a private workforce of domain experts is critical to avoid introducing systematic labeling errors that degrade model fairness.

How to eliminate wrong answers

Option A is wrong because automatic labeling with Active Learning relies on the model's own predictions to label data, which can propagate and amplify existing biases present in the initial training data, rather than reducing labeling bias. Option B is wrong because a public workforce with no qualification introduces high variability in labeling quality and can increase bias due to lack of domain knowledge, inconsistent interpretation, and potential cultural or demographic biases among anonymous workers. Option D is wrong because a vendor managed workforce, while providing some quality control, typically uses generalist labelers who may lack the specific domain expertise needed to correctly label nuanced or specialized data, which can still introduce bias from misinterpretation.

361
MCQmedium

A company uses Amazon Comprehend to analyze customer sentiment. They discover the model performs poorly on text with slang from underrepresented groups. What is the most responsible action?

A.Restrict model use to only standard English
B.Remove slang from input before inference
C.Adjust the confidence threshold only for those groups
D.Collect more representative training data including slang
AnswerD

Representative data reduces bias.

Why this answer

The core principle of responsible AI requires that models be trained on data that is representative of the populations they serve. Amazon Comprehend's sentiment analysis is a supervised machine learning model; its poor performance on slang from underrepresented groups indicates a training data bias. Collecting more representative training data, including that slang, directly addresses the root cause by enabling the model to learn the linguistic patterns of those groups, improving fairness and accuracy without restricting access or masking the problem.

Exam trap

The trap here is that candidates may choose a quick-fix technical workaround (like removing slang or adjusting thresholds) instead of recognizing that the responsible AI approach requires addressing the root cause of bias through data representativeness, which is a core ethical and technical principle tested in the AIF-C01 exam.

How to eliminate wrong answers

Option A is wrong because restricting model use to only standard English is a discriminatory practice that excludes underrepresented groups, violating responsible AI principles of fairness and inclusivity; it does not fix the model's bias but rather avoids it. Option B is wrong because removing slang from input before inference is a data preprocessing workaround that does not address the underlying model bias; it discards valuable linguistic data and can alter the true sentiment of the text, leading to inaccurate results. Option C is wrong because adjusting the confidence threshold only for those groups is a post-hoc tuning that does not correct the model's learned bias; it may reduce false positives but does not improve the model's understanding of slang, and it introduces inconsistent decision boundaries that can be seen as unfair.

362
MCQmedium

A company wants to build a customer service chatbot that answers questions about their internal policy documents. The documents are updated monthly, and the team cannot afford to retrain a model each time. Which approach is MOST appropriate?

A.Fine-tune a base LLM on the policy documents monthly
B.Use Retrieval-Augmented Generation (RAG) with the policy documents indexed in a vector store
C.Use a larger foundation model with a longer context window and paste all documents into each prompt
D.Train a custom model from scratch on the policy documents each month
AnswerB

RAG retrieves relevant document chunks at query time, ensuring the chatbot always answers from the latest uploaded documents without any model retraining.

Why this answer

RAG (Retrieval-Augmented Generation) allows the LLM to retrieve relevant document sections at inference time, so knowledge stays current without retraining. The other options either require expensive retraining for each update or lack document grounding.

363
MCQeasy

Which metric is most appropriate for evaluating a classification model when false positives are costly?

A.Precision
B.F1 score
C.Recall
D.Accuracy
AnswerA

Precision is the fraction of true positives among predicted positives, addressing false positives.

Why this answer

Precision is the most appropriate metric when false positives are costly because it measures the proportion of true positive predictions among all positive predictions (TP / (TP + FP)). A high precision indicates that when the model predicts a positive class, it is very likely correct, minimizing the number of false positives. This directly aligns with the business requirement to avoid costly false alarms.

Exam trap

The AIF-C01 exam often tests the distinction between precision and recall by framing a cost scenario, and the trap here is that candidates confuse 'costly false positives' with 'costly false negatives' and incorrectly choose recall or F1 score without analyzing which error type is being penalized.

How to eliminate wrong answers

Option B (F1 score) is wrong because it is the harmonic mean of precision and recall, balancing both false positives and false negatives; it does not specifically penalize false positives more heavily. Option C (Recall) is wrong because it measures the proportion of actual positives correctly identified (TP / (TP + FN)), which is useful when false negatives are costly, not false positives. Option D (Accuracy) is wrong because it considers overall correct predictions (TP + TN) divided by total predictions, which can be misleading in imbalanced datasets and does not isolate the cost of false positives.

364
Multi-Selecteasy

A developer is building an application that uses Amazon Bedrock to answer questions based on a large internal knowledge base. The knowledge base contains PDFs, Word documents, and web pages. Which TWO AWS services are commonly used together to implement a Retrieval-Augmented Generation (RAG) architecture on AWS? (Select TWO.)

Select 2 answers
A.Amazon Bedrock Knowledge Bases
B.Amazon SageMaker Ground Truth
C.AWS Glue
D.Amazon Athena
E.Amazon OpenSearch Serverless
AnswersA, E

Knowledge Bases is the managed service for creating a RAG pipeline with document ingestion and retrieval.

Why this answer

Amazon Bedrock Knowledge Bases is correct because it provides a fully managed service that ingests, chunks, and indexes documents (PDFs, Word, web pages) into a vector store, enabling retrieval-augmented generation (RAG) without custom infrastructure. It integrates directly with foundation models in Bedrock to retrieve relevant context and generate answers grounded in the knowledge base.

Exam trap

The trap here is that candidates may confuse data preparation or query services (like AWS Glue or Athena) with the vector search and retrieval components essential for RAG, overlooking that Amazon OpenSearch Serverless provides the vector database capability while Bedrock Knowledge Bases orchestrates the ingestion and retrieval pipeline.

365
MCQmedium

A company wants to use Amazon Bedrock to translate customer emails from English to Spanish. The emails contain occasional personal names and addresses. Which Guardrail configuration should be applied to protect customer privacy?

A.Grounding check
B.PII detection
C.Topic denial
D.Content filtering
AnswerB

Correct. PII detection identifies and can mask personal data.

Why this answer

PII detection in Bedrock Guardrails can identify and redact personally identifiable information such as names and addresses. Content filtering, topic denial, and grounding check do not specifically target PII.

366
MCQhard

Refer to the exhibit. A data scientist ran a training job on Amazon SageMaker and it failed. Which action should the data scientist take FIRST to resolve the issue?

A.Request a service limit increase for the instance type
B.Use a different AWS region
C.Enable spot training
D.Use a different instance type that is available in the region
AnswerD

The error clearly states the instance type is unsupported; switching to an available type resolves it.

Why this answer

The error indicates that the requested instance type is not available in the current region due to capacity constraints. The first step is to switch to a different instance type that is available in the same region, as this is the quickest and most direct way to resolve the provisioning failure without requiring service limit increases or changing regions.

Exam trap

AWS often tests the distinction between capacity unavailability (which requires switching instance types) and service limits (which require a limit increase), leading candidates to mistakenly request a limit increase when the real issue is temporary capacity constraints.

How to eliminate wrong answers

Option A is wrong because a service limit increase addresses the maximum number of instances you can run, not the immediate unavailability of a specific instance type in the region. Option B is wrong because using a different AWS region is a more drastic step that may introduce latency, data residency issues, or additional costs; the first action should be to try an alternative instance type within the same region. Option C is wrong because enabling spot training does not resolve the unavailability of the instance type; spot instances still require available capacity for the requested instance type.

367
MCQeasy

A data scientist is prototyping a text summarization application using Amazon Bedrock. They want to quickly test different prompts and models without writing code. Which AWS service or feature should they use?

A.AWS Cloud9
B.Amazon SageMaker Studio
C.AWS Lambda
D.Bedrock Playground
AnswerD

Bedrock Playground provides a console-based chat interface to test models and prompts without any code.

Why this answer

Bedrock Playground is a no-code interface within Amazon Bedrock that allows users to experiment with different foundation models and prompts interactively. It is specifically designed for rapid prototyping without writing any code, making it the ideal choice for quickly testing text summarization prompts and models.

Exam trap

The trap here is that candidates may confuse SageMaker Studio (a full ML IDE) with a no-code testing environment, overlooking that Bedrock Playground is the dedicated service for quick, code-free model experimentation.

How to eliminate wrong answers

Option A is wrong because AWS Cloud9 is a cloud-based integrated development environment (IDE) for writing, running, and debugging code, not a no-code prompt testing tool. Option B is wrong because Amazon SageMaker Studio is a machine learning IDE that requires coding and setup for model experimentation, not a quick no-code playground for Bedrock models. Option C is wrong because AWS Lambda is a serverless compute service for running code in response to events, not an interactive interface for testing prompts without writing code.

368
MCQmedium

A startup wants to generate high-quality images from text descriptions using Amazon Bedrock. They need to create realistic images of products for an e-commerce catalog. Which model provider should they choose?

A.Stability AI
B.Anthropic
C.Mistral AI
D.Cohere
AnswerA

Stability AI offers diffusion models that generate images from text prompts.

Why this answer

Stability AI is the correct choice because it specializes in image generation models, such as Stable Diffusion, which are designed to produce high-quality, photorealistic images from text prompts. Amazon Bedrock offers Stability AI's models for text-to-image tasks, making it ideal for generating realistic product images for an e-commerce catalog.

Exam trap

The trap here is that candidates may confuse general-purpose LLM providers (Anthropic, Mistral, Cohere) with specialized image generation models, assuming any AI model can generate images, but AWS Bedrock explicitly partitions providers by modality.

How to eliminate wrong answers

Option B (Anthropic) is wrong because Anthropic focuses on large language models (LLMs) like Claude, which are optimized for text generation, analysis, and conversation, not image generation. Option C (Mistral AI) is wrong because Mistral AI provides LLMs for natural language processing tasks, lacking any native image generation capabilities. Option D (Cohere) is wrong because Cohere specializes in embedding and retrieval-augmented generation (RAG) models for text, not image synthesis.

369
Multi-Selecthard

A machine learning team is building a binary classifier using Amazon SageMaker. The dataset has 10,000 features and 1,000 samples. The model overfits severely. Which TWO approaches are MOST likely to reduce overfitting? (Choose two.)

Select 2 answers
A.Increase the batch size to the full dataset
B.Use a neural network with more layers
C.Perform feature selection to reduce the number of features
D.Add L2 regularization to the loss function
E.Train the model for more epochs
AnswersC, D

Reducing features reduces dimensionality and overfitting risk.

Why this answer

With 10,000 features and only 1,000 samples, the model has a very high-dimensional feature space, which is a classic cause of overfitting. Reducing the number of features through feature selection lowers the model's capacity and removes noise, directly addressing the curse of dimensionality. In SageMaker, this can be done using built-in algorithms like XGBoost's feature importance or by preprocessing with PCA in a SageMaker Processing job.

Exam trap

AWS often tests the misconception that increasing batch size or training longer always improves generalization, when in fact these techniques can worsen overfitting in high-dimensional, low-sample scenarios.

370
MCQeasy

A company wants to use AI to automatically transcribe customer service calls into text. Which AWS service is most suitable?

A.Amazon Transcribe
B.Amazon Comprehend
C.Amazon Polly
D.Amazon Rekognition
AnswerA

Transcribe is designed for speech-to-text conversion.

Why this answer

Amazon Transcribe is the correct choice because it is a fully managed automatic speech recognition (ASR) service designed specifically to convert speech into text. It can handle real-time streaming or batch processing of audio files, making it ideal for transcribing customer service calls into searchable text.

Exam trap

The trap here is that candidates often confuse Amazon Transcribe (speech-to-text) with Amazon Polly (text-to-speech) or assume Amazon Comprehend can process audio directly, when in fact Comprehend only works on text input.

How to eliminate wrong answers

Option B is wrong because Amazon Comprehend is a natural language processing (NLP) service used for extracting insights like sentiment, entities, and key phrases from text, not for transcribing audio. Option C is wrong because Amazon Polly is a text-to-speech (TTS) service that converts text into lifelike speech, the opposite of the required speech-to-text functionality. Option D is wrong because Amazon Rekognition is a computer vision service for analyzing images and videos, such as object detection and facial recognition, and has no capability to process audio or transcribe speech.

371
MCQmedium

Refer to the exhibit. The training job is failing with an error 'CUDA out of memory'. Which hyperparameter change is MOST likely to resolve the issue?

A.Increase the number of epochs to 10
B.Increase learning_rate to 5e-4
C.Reduce per_device_train_batch_size to 4
D.Increase max_seq_length to 1024
AnswerC

Smaller batch size uses less GPU memory.

Why this answer

The 'CUDA out of memory' error indicates that the GPU memory is exhausted during training. Reducing `per_device_train_batch_size` directly decreases the number of samples processed simultaneously per GPU, which lowers memory consumption for activations, gradients, and optimizer states. This is the most direct and effective hyperparameter change to resolve an out-of-memory condition.

Exam trap

AWS often tests the misconception that increasing epochs or learning rate can fix resource exhaustion errors, when in fact only adjustments that reduce per-step memory usage (like batch size or sequence length) are effective.

How to eliminate wrong answers

Option A is wrong because increasing the number of epochs does not affect per-step memory usage; it only increases the total number of training iterations, which would not resolve an immediate memory allocation failure. Option B is wrong because increasing the learning rate changes the step size for gradient updates but has no impact on GPU memory consumption during forward/backward passes. Option D is wrong because increasing `max_seq_length` increases the sequence length of input tokens, which enlarges the memory footprint for attention matrices and hidden states, making the out-of-memory error worse.

372
MCQmedium

A data science team is using Amazon SageMaker Studio. To meet compliance requirements, they need to ensure that all user activity in the environment is logged and that any unauthorized access attempts are detected. Which approach should they take?

A.Enable SageMaker Model Monitor and configure Amazon S3 server access logs.
B.Enable AWS CloudTrail and Amazon GuardDuty for threat detection.
C.Use AWS Config rules to track changes and Amazon Inspector for vulnerability scanning.
D.Enable SageMaker Studio with VPC only mode and use AWS CloudTrail.
AnswerB

CloudTrail logs API calls and GuardDuty detects unauthorized access patterns.

Why this answer

AWS CloudTrail logs all API activity in SageMaker Studio, including user actions and access attempts, while Amazon GuardDuty provides intelligent threat detection by analyzing CloudTrail logs, VPC flow logs, and DNS logs for unauthorized access patterns. Together, they meet compliance requirements for logging and detecting unauthorized access without additional configuration overhead.

Exam trap

The trap here is that candidates often confuse logging (CloudTrail) with threat detection (GuardDuty) and assume that enabling CloudTrail alone satisfies both requirements, but GuardDuty is specifically needed to analyze logs for unauthorized access attempts.

How to eliminate wrong answers

Option A is wrong because SageMaker Model Monitor is designed for detecting data drift and model quality issues, not for logging user activity or detecting unauthorized access; Amazon S3 server access logs only capture requests to S3 buckets, not SageMaker Studio user actions. Option C is wrong because AWS Config rules track resource configuration changes and compliance, not user activity logging, and Amazon Inspector focuses on vulnerability scanning of EC2 instances and container images, not threat detection for user access. Option D is wrong because VPC only mode restricts network access but does not provide logging of user activity or threat detection; AWS CloudTrail alone logs API calls but lacks the intelligent threat detection capability that GuardDuty provides for identifying unauthorized access attempts.

373
Multi-Selecthard

A company is using Amazon Fraud Detector to detect fraudulent transactions. Which TWO actions can be taken to improve model accuracy? (Select TWO.)

Select 2 answers
A.Increase the volume of event data
B.Deploy the model to multiple endpoints
C.Use a different detector type
D.Use a different model version
E.Select event variables that are more predictive
AnswersA, E

More data can help the model learn better patterns.

Why this answer

Increasing the volume of event data provides Amazon Fraud Detector with more examples of both fraudulent and legitimate transactions, which allows the model to learn more robust patterns and reduce overfitting. More data helps the model generalize better to unseen events, directly improving prediction accuracy.

Exam trap

The AIF-C01 exam often tests the misconception that changing model versions or detector types alone improves accuracy, when in reality accuracy improvements require data or feature enhancements.

374
MCQhard

A financial services company is building a predictive model using Amazon SageMaker. The model training data contains personally identifiable information (PII). The company must ensure that the data is encrypted at rest and in transit, and that access to the data is logged. Which combination of AWS services meets these requirements?

A.Use S3 server-side encryption with S3-managed keys (SSE-S3) and enable CloudTrail trail for S3 data events
B.Use S3 server-side encryption with AWS KMS (SSE-KMS), enable SageMaker inter-container traffic encryption, and enable CloudTrail data events for the S3 bucket
C.Use S3 client-side encryption and configure SageMaker to use HTTPS for inter-container traffic
D.Enable S3 default encryption with AES-256 and use AWS CloudTrail for S3 data events
AnswerB

SSE-KMS provides encryption at rest with key control, inter-container traffic encryption provides transit encryption, and CloudTrail data events log access to objects.

Why this answer

It addresses all three requirements: SSE-KMS encrypts data at rest in S3, SageMaker inter-container traffic encryption ensures data in transit between training containers is encrypted, and CloudTrail data events for the S3 bucket log all access to the PII data. This combination provides a complete, auditable encryption and logging solution.

Exam trap

The trap here is that candidates often assume S3 server-side encryption alone (SSE-S3 or SSE-KMS) satisfies all encryption requirements, forgetting that SageMaker inter-container traffic encryption is needed for data in transit during distributed training.

How to eliminate wrong answers

Option A is wrong because SSE-S3 does not provide customer-controlled key management or audit trails for key usage, and CloudTrail data events alone do not cover encryption of data in transit within SageMaker. Option C is wrong because client-side encryption places the burden on the client and does not guarantee encryption at rest in S3 unless explicitly configured, and HTTPS for inter-container traffic is not the same as SageMaker's built-in inter-container encryption which uses TLS. Option D is wrong because S3 default encryption with AES-256 is equivalent to SSE-S3, which lacks customer-managed key audit capabilities, and CloudTrail data events do not address encryption in transit for SageMaker training jobs.

375
MCQmedium

A company wants to build a customer support chatbot that answers questions based on a large internal knowledge base. Which AWS service is most suitable for implementing RAG to retrieve relevant documents?

A.Amazon Lex
B.Amazon Polly
C.Amazon Connect
D.Amazon Kendra
AnswerD

Kendra provides intelligent search and retrieval from indexed documents, ideal for RAG workflows.

Why this answer

Amazon Kendra is a highly accurate enterprise search service that can retrieve relevant documents from various sources, which can then be provided to a foundation model for generation. Lex, Connect, and Polly are not designed for document retrieval.

Page 4

Page 5 of 9

Page 6

All pages