AIF-C01 · domain
Guidelines for Responsible AI
This domain covers AWS's responsible AI principles and the tooling that supports them: fairness, explainability, privacy, safety, controllability, verifiability, and governance. Questions ask you to match scenarios (healthcare diagnostics, loan approvals, chatbots) to the right AWS service or practice, and to distinguish AWS's stated principles from plausible-sounding distractors.
Focused practice
Practice Guidelines for Responsible AI questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Guidelines for Responsible AI
Be able to pick the correct AWS service for a responsible-AI task: Clarify for bias and explainability, Bedrock Guardrails for harmful content, Model Cards and AI Service Cards for documentation. The single most important thing: know which service addresses bias versus which addresses safety or drift.
Amazon SageMaker Clarify for bias detection and model explainability (SHAP values)
Amazon Bedrock Guardrails for filtering harmful content and defining denied topics
SageMaker Model Monitor for detecting drift and bias in deployed models
AWS AI Service Cards and SageMaker Model Cards for documenting intended use and limitations
Watch out for
Common Guidelines for Responsible AI exam traps
- ▸Confusing SageMaker Clarify (bias/explainability) with SageMaker Model Monitor (production drift detection) — Clarify runs at training and inference, Monitor watches live endpoints.
- ▸Treating generic security services like IAM or Macie as responsible-AI tools when the question asks about bias, fairness, or explainability specifically.
- ▸Inventing principles: AWS's core responsible AI principles are fairness, explainability, privacy/security, safety, controllability, verifiability, and governance — not 'profitability' or 'automation'.
Question index
All Guidelines for Responsible AI questions (82)
Click any question to see the full explanation, or start a practice session above.
A healthcare company must train a model on sensitive patient data while complying with privacy regulations. They want to add noise to the training process to prevent re-identification. Which technique should they implement?
Hard2A healthcare company is training a model on sensitive patient data using Amazon SageMaker. They need to ensure that individual patient data cannot be reverse-engineered from the model. Which technique should they implement during training?
Medium3Refer to the exhibit. An AWS customer runs SageMaker Clarify to evaluate bias in their training data. The report shows multiple metrics with status 'violated'. What should the customer do next?
Medium4Refer to the exhibit. An ML team finds that their training data is stored in two subfolders under s3://my-bucket/train/. They need to ensure that the dataset is balanced for training a classification model. What should they do?
Easy5A retail company is preparing to launch a generative AI customer support assistant built on Amazon Bedrock. Before launch, the responsible AI review board asks the team to document the assistant's intended purpose, its known limitations, and the evaluation results from fairness and accuracy testing. Which AWS resource should the team produce to satisfy this request?
Easy6An e-commerce company uses an Amazon Lex chatbot to handle customer inquiries. They want to implement human oversight for sensitive interactions, such as when the chatbot cannot provide a confident response. Which AWS service should they integrate?
Medium7A team is deploying a regression model for loan approval. To ensure transparency for regulators, they need to explain individual predictions. Which interpretability method can provide local explanations by approximating the model with a simpler surrogate?
Medium8A data scientist runs the SageMaker Clarify job shown in the exhibit for a credit risk model. After reviewing the results, they find a high bias metric for the gender facet. Which action is most consistent with responsible AI?
Hard9A social media company uses Amazon Comprehend to moderate user comments. They want to avoid censoring legitimate speech while catching hate speech. Which approach aligns with responsible AI governance?
Easy10A media company generates AI-written summaries of news articles using Amazon Bedrock and publishes them automatically. Legal counsel is concerned that the model might reproduce long verbatim passages from copyrighted source articles. The team wants a configurable safeguard that detects and filters responses containing text closely matching the source documents before publication. Which approach should they implement?
Hard11Which THREE practices are recommended for promoting robustness and security in AI systems?
Medium12A city government uses an Amazon SageMaker model to score affordable-housing applications. To meet its responsible AI commitments, the IT team must ensure that every automated decision can be traced back to the exact model version and training dataset used, and that changes are reviewed before deployment. Which combination of AWS practices best provides this accountability?
Medium13Which TWO actions should a data scientist take to evaluate fairness of a binary classification model using Amazon SageMaker Clarify? (Choose two.)
Medium14A fintech company wants its Amazon Bedrock assistant to answer customer questions only from its approved policy documents and to avoid fabricating answers when the documents do not cover a topic. The team plans to use a knowledge base with retrieval augmented generation. Which Bedrock Guardrails feature should they configure to detect and block responses that are not supported by the retrieved source passages?
Hard15Refer to the exhibit. A data scientist runs an Amazon SageMaker Clarify bias analysis on a binary classifier. The pre-training ClassImbalance is 1.5 and the post-training DPPL is 0.15. What should the data scientist conclude?
Medium16A company is deploying an AI-based diagnostic system in healthcare. Which THREE practices align with AWS responsible AI guidelines? (Choose THREE.)
Medium17A company uses Amazon SageMaker to build a binary classification model for loan approvals. After training, the data science team wants to evaluate the model for potential bias against a protected group. Which AWS service should they use to compute bias metrics?
Easy18A startup uses Amazon Lex to build a chatbot for mental health support. They must ensure user conversations are private and not used for model improvement. Which AWS service can help anonymize text data before storage?
Medium19Which TWO practices help ensure transparency in AI systems? (Choose 2)
Easy20Which TWO actions can help mitigate bias in a face recognition model trained on AWS? (Select two.)
Easy21A retail bank trained a loan-approval model using Amazon SageMaker. Before deployment, the compliance team asks the ML engineer to produce a report that shows, for each input feature, how strongly its values influence the model's predictions, so reviewers can confirm the model is not making decisions based on a protected attribute such as postal code. Which SageMaker Clarify capability should the engineer use to generate this feature-attribution report?
Medium22A healthcare organization is developing a clinical decision support system using Amazon Bedrock with a large language model (LLM) to analyze patient symptoms and suggest potential diagnoses. The system must comply with HIPAA and internal responsible AI guidelines. During testing, the model occasionally generates diagnoses that are inconsistent with established medical guidelines and shows a tendency to recommend more aggressive treatments for patients from certain demographic groups. The team has already implemented data encryption, access controls, and basic content filtering. They need to further reduce biased and unsafe outputs without delaying the deployment timeline. What should the team do next?
Hard23A company uses an AI system to automate loan approvals. The model uses demographic features and achieves high accuracy, but the company wants to ensure compliance with responsible AI guidelines. Which practice best balances performance and fairness?
Hard24A logistics company deployed a demand forecasting model six months ago. The data science team notices that forecast accuracy has degraded gradually, and investigation shows that customer ordering patterns changed after a competitor entered the market. The team wants a repeatable process that detects when incoming data drifts from the training distribution and automatically retrains the model when drift exceeds a threshold. Which AWS approach should they implement?
Hard25A financial services company uses Amazon Bedrock to power a customer-facing chatbot that answers questions about loan products. During testing, the team notices the model sometimes produces responses that sound confident but contain fabricated interest rates. The compliance team requires a mechanism to automatically detect when responses are not grounded in the company's approved product documentation. Which AWS capability should the team use to meet this requirement?
Medium26A hospital uses an AI system to prioritize patients for organ transplant based on predicted survival rates. The system was trained on historical data that includes socioeconomic factors. A review reveals that the system systematically assigns lower priority to patients from lower-income neighborhoods, even when medical urgency is similar. The hospital's ethics board demands an immediate remedy. The data science team is small and must act quickly. What should the hospital do to address this fairness issue most effectively?
Easy27A healthcare startup deploys a model to predict patient readmission risk using Amazon SageMaker. After deployment, the model shows higher false-positive rates for a specific age group. What is the most responsible first step?
Medium28A healthcare organization uses an AI model to predict patient readmission risks. The model's predictions are used by doctors to allocate follow-up care. The organization wants to ensure compliance with responsible AI guidelines. Which practice best supports explainability?
Medium29A data scientist wants to detect potential bias in a binary classification model before deployment. Which AWS service can analyze the model's predictions across different demographic groups?
Easy30Refer to the exhibit. A data scientist runs SageMaker Clarify on a training dataset and receives the above JSON output. Which bias metric exceeds its threshold?
Hard31Refer to the exhibit. A team is configuring a SageMaker Model Bias job. The baseline job has been completed. However, the bias job fails with a resource not found error. What is the most likely cause?
Hard32A financial institution uses a machine learning model to approve loan applications. The model is trained on historical data that includes biased lending practices. What is the most effective first step to address potential bias?
Easy33A company deploys a deep learning model for image classification using Amazon SageMaker. They are concerned about adversarial attacks that could misclassify images with small perturbations. Which of the following is the most effective approach to improve model robustness?
Hard34Which TWO techniques provide interpretability for machine learning models at a local (per-prediction) level? (Choose two.)
Easy35An insurance company uses a machine learning model to adjust premiums. During a review, the model is found to be penalizing customers based on zip codes correlated with racial demographics, leading to potential discrimination. Which combination of actions best addresses this fairness issue while maintaining business value?
Hard36A research lab uses Amazon SageMaker to train a deep learning model for medical diagnosis. They need to ensure the model's decisions are interpretable to clinicians. Which SageMaker feature provides local and global feature importance?
Hard37A team is developing an AI system and wants to document key information such as intended use, performance benchmarks, and limitations. According to AWS best practices for responsible AI, what should they create?
Easy38A media company uses a generative AI model to automatically create image captions for user-uploaded photos. During quality assurance, testers discover that the model sometimes generates captions that include stereotypes based on gender and race, even when the photos do not contain people. For example, a photo of a kitchen produces captions like 'woman cooking,' and a photo of a sports car generates 'man driving.' The company wants to launch the feature soon but recognizes the reputational risk. They have a limited budget and need to implement a solution that reduces harmful stereotypes without overly restricting the captions' creativity. The team has access to the model's training data, which is a large public dataset of image-caption pairs. Which approach should the team prioritize?
Hard39Which THREE considerations are important when implementing responsible AI for a production NLP system? (Choose three.)
Hard40After deploying a model, a company notices that the distribution of the input features has shifted compared to the training data. Which feature of Amazon SageMaker Model Monitor can alert them to this change?
Easy41Which TWO actions are most aligned with responsible AI practices when deploying a model that makes decisions affecting individuals? (Choose 2)
Medium42A large enterprise has multiple teams deploying ML models on AWS. To ensure governance and accountability, they need to enforce that all models pass a fairness review before production deployment. Which SageMaker feature should they use to implement this approval workflow?
Hard43A media company uses Amazon Transcribe for automatic speech recognition. They discover the model has higher error rates for non-native English speakers. Which Responsible AI principle are they failing to uphold?
Easy44A team is using Amazon Comprehend to analyze customer feedback for sentiment. They want to detect and mitigate potential bias against certain demographic groups. Which TWO approaches should they consider? (Choose TWO.)
Hard45A company is deploying a generative AI model that produces text summaries of legal documents. To comply with responsible AI guidelines, which of the following is the most critical to ensure transparency?
Hard46A government agency is building an AI assistant using Amazon Bedrock to help citizens understand eligibility rules for public benefits. The agency's legal team requires that the assistant never provide medical diagnoses, never discuss competitors' services, and refuse requests to draft legal documents. The agency also needs to log blocked interactions for periodic review. Which Amazon Bedrock feature should the team configure to enforce these restrictions and capture denials?
Medium47Which of the following is a key principle of responsible AI according to AWS?
Easy48A company uses Amazon SageMaker Ground Truth to label a dataset for a binary classifier. To reduce labeling bias, which workforce configuration is most appropriate?
Medium49A company uses Amazon Comprehend to analyze customer sentiment. They discover the model performs poorly on text with slang from underrepresented groups. What is the most responsible action?
Medium50A financial services company uses Amazon Bedrock to power a customer-facing chatbot that answers questions about loan products. During a compliance review, auditors ask the team to demonstrate that the chatbot's responses are grounded in approved policy documents and that the model is not generating unsupported financial advice. Which AWS service or feature should the team use to trace each response back to the specific source passages used to generate it?
Medium51A retail company is deploying a machine learning model to analyze customer reviews and predict sentiment. The team wants to follow responsible AI guidelines to ensure fairness, transparency, and accountability. Which TWO actions should the team take? (Choose TWO.)
Easy52A marketing team uses Amazon Bedrock to generate promotional copy for a global campaign. A reviewer discovers that some outputs include biased stereotypes about certain nationalities. The team wants a configurable control that detects and blocks this category of harmful content before the copy reaches reviewers. Which Amazon Bedrock feature should they configure?
Easy53A retail company is deploying a chatbot to handle customer inquiries. During testing, they notice the chatbot occasionally uses offensive language when responding to certain user inputs. Which responsible AI principle is being violated?
Easy54Which TWO actions help ensure fairness in an AI system deployed on AWS? (Select two.)
Medium55An AI team uses the IAM policy shown in the exhibit to control endpoint creation. Why does this policy support responsible AI?
Medium56A financial services company must comply with regulatory requirements that mandate explainability of credit scoring models. They have deployed a model using SageMaker and need to generate reports showing feature importance for each prediction. Which combination of services should they use to automate this?
Hard57Which TWO actions are essential for ensuring accountability in AI systems according to AWS responsible AI guidelines?
Easy58A data scientist is using Amazon SageMaker to train a model and wants to understand the contribution of each feature to individual predictions. Which technique should they use to generate local explanations?
Medium59A financial services company has deployed a machine learning model that approves or denies loan applications in real time. The compliance team requires that any applicant who is denied must receive a meaningful explanation of the decision, and the company must be able to prove which model version and input features produced each decision for audit purposes. Which AWS service should the company use to capture the model's feature attributions and store them for each inference request?
Medium60A retail company uses a recommendation system that occasionally suggests inappropriate products to minors. Which responsible AI practice should be applied?
Easy61An insurance company uses an Amazon SageMaker model to set premium discounts. An internal audit finds that the model's error rates are substantially higher for one demographic group than another, even though overall accuracy is strong. The data science team must investigate and quantify this disparity before the model can be re-approved. Which approach should they take first?
Hard62A company uses an AI system to screen job applications. The system was trained on resumes from previous hires, which predominantly came from a specific demographic. As a result, the system may unfairly filter out qualified candidates from other backgrounds. Which responsible AI practice should the company implement?
Medium63A financial services company uses Amazon Rekognition to verify customer identities. To ensure responsible AI practices, which measure should the company prioritize?
Easy64Which TWO of the following are key components of a responsible AI governance framework?
Hard65Refer to the exhibit. A developer is reviewing CloudWatch Logs for a deployed model and notices the same input appears multiple times with slightly different probabilities. What responsible AI concern does this pattern suggest?
Easy66A retail bank is preparing to launch an Amazon Bedrock-based assistant that recommends credit card products to customers. The responsible AI review board requires the team to document how the system's outputs can be explained to regulators and customers. Which TWO actions best support explainability for this deployment? (Choose two.)
Medium67A bank uses an AI system to detect fraudulent transactions. The model has high precision but low recall for small transactions, potentially missing fraud. Which approach aligns with responsible AI?
Hard68Refer to the exhibit. An AWS CloudTrail log shows the creation of an IAM policy for a SageMaker execution role. Which responsible AI concern does this configuration raise?
Medium69A media company uses Amazon Rekognition to automatically moderate user-uploaded images on its platform. The moderation team reports that some images containing nudity are being approved, while harmless images of sculptures are being rejected. The company wants to review the specific labels and confidence scores that Rekognition assigned to each image before deciding whether to appeal. Which action should the team take to obtain this information?
Easy70A retail bank is deploying an Amazon SageMaker model that recommends credit limit increases to existing cardholders. The bank's responsible AI review board requires that the model's decisions be explainable to customers who request an adverse action notice, and that the team be able to detect whether any single input feature is disproportionately driving predictions. Which TWO capabilities should the team implement to meet these requirements? (Choose two.)
Hard71A small insurance firm is selecting an AI service to classify customer emails by topic. The compliance officer insists that the provider publish clear documentation on how the model was built, its intended use, and its limitations, and that the firm be able to see model version details. Which AWS resource should the firm consult to evaluate these transparency characteristics of Amazon Bedrock foundation models?
Easy72A public sector agency is building a chatbot on Amazon Bedrock that answers citizen questions about benefits eligibility. The agency must ensure the chatbot never provides medical or legal advice, and that responses stay grounded in the agency's official policy documents rather than the foundation model's general knowledge. Which Amazon Bedrock Guardrails configuration should the team apply?
Medium73A data science team is building a resume screening model and wants to ensure it does not exhibit gender bias. Which TWO actions are most effective for mitigating bias? (Choose TWO.)
Easy74A hospital uses an Amazon SageMaker model to predict sepsis risk from electronic health records and displays a risk score to clinicians. An internal review finds that the model was trained on data from a single urban hospital and performs worse for patients from rural clinics. The review board asks the data science team to quantify and document this performance gap across patient subgroups before the model is expanded. Which approach should the team take?
Hard75A company uses Amazon Rekognition for facial analysis. They want to ensure the model doesn't exhibit bias based on skin tone. What should they do?
Easy76A startup is developing a mobile app that uses facial recognition to verify user identity for account access. The app is intended for a global audience, but the training data predominantly includes images of light-skinned individuals. During beta testing, users with darker skin tones report frequent verification failures, while light-skinned users have a high success rate. The startup wants to release the app soon and needs to address this fairness issue without delaying the launch too much. The team has limited resources. Which approach should they take to most effectively mitigate the bias while meeting the launch timeline?
Easy77A company develops a chatbot using Amazon Lex. To ensure transparency, what should the chatbot do when it cannot answer a question?
Easy78A machine learning team is building a credit risk model and discovers that the training data has a significant imbalance in loan approval rates between two demographic groups. They decide to reweight the training samples using a preprocessing technique. Which SageMaker Clarify feature can help compute the appropriate sample weights to achieve demographic parity?
Hard79A financial services company is deploying a generative AI chatbot to assist customers with account inquiries. The company wants to ensure the chatbot does not generate biased or harmful responses. Which combination of AWS services and practices should the company implement to monitor and mitigate these risks?
Medium80Which THREE considerations are essential for ensuring responsible AI in a model that predicts employee performance? (Choose 3)
Hard81A healthcare startup uses Amazon SageMaker to train a model predicting patient readmission. They need to ensure the model's predictions do not discriminate based on protected attributes like age or race. Which SageMaker feature allows them to monitor and mitigate bias during training?
Hard82Which of the following is NOT one of the core principles of responsible AI as defined by AWS?
EasyOther domains
All AIF-C01 exam domains
Frequently asked questions
- What does the Guidelines for Responsible AI domain cover on the AIF-C01 exam?
- Be able to pick the correct AWS service for a responsible-AI task: Clarify for bias and explainability, Bedrock Guardrails for harmful content, Model Cards and AI Service Cards for documentation. The single most important thing: know which service addresses bias versus which addresses safety or drift.
- How many questions are in this domain?
- This page lists all 82 Guidelines for Responsible AI questions in the AIF-C01 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Guidelines for Responsible AI questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.