hardMultiple Choice
AIF-C01 Practice Question: An enterprise is building a RAG solution with…
An enterprise is building a RAG solution with Amazon Bedrock and needs to ensure that the retrieved documents are from authorised sources only. They also must prevent the model from generating responses that contain personally identifiable information (PII). Which two Bedrock features combined address these requirements?
⚠ Common exam trap
AWS often tests the distinction between features that enable retrieval (Knowledge Bases) versus those that enforce safety (Guardrails), and candidates may mistakenly think Agents alone can handle both authorization and filtering, or that prompt engineering is sufficient for PII control.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon Bedrock Knowledge Bases and Bedrock Guardrails
Amazon Bedrock Knowledge Bases lets you ground responses in your own curated data sources (e.g., S3, OpenSearch), so retrieval is limited to the documents you configure and index. Amazon Bedrock Guardrails provides configurable safeguards, including sensitive information filters that can detect and block PII in model responses. Combining Knowledge Bases for controlled retrieval with Guardrails for PII filtering addresses both requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Amazon Bedrock Knowledge Bases and Bedrock Guardrails
Why this is correct
Bedrock Knowledge Bases restrict retrieval to indexed, approved data sources, satisfying the authorised-sources constraint. Guardrails then apply PII filters and deny topics to both input prompts and generated output, blocking PII leakage. Together they cover retrieval provenance and response safety, the two distinct requirements in the stem.
- ✗
Amazon Bedrock Model Evaluation and Bedrock Studio
Why it's wrong here
Model Evaluation and Studio are for testing and prototyping, not production source control or PII blocking.
- ✗
Amazon Bedrock Agents and Bedrock Guardrails
Why it's wrong here
Agents do not control data sources.
- ✗
Amazon Bedrock Playground and prompt engineering
Why it's wrong here
Playground is for experimentation; prompt engineering alone cannot enforce PII redaction reliably.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 862 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.