How many Troubleshooting Scenario Questions questions are on this page?

This page has 5 Troubleshooting Scenario Questions scenario questions for the AIF-C01 exam, each with detailed explanations and wrong-answer analysis.

How should I approach AIF-C01 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to AWS Certified AI Practitioner AIF-C01 questions

Scenario-based practice

Troubleshooting Scenario Questions

Practise AWS Certified AI Practitioner AIF-C01 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

AIF-C01

exam code

Amazon Web Services

vendor

Scenario guide

How to approach troubleshooting scenario questions

These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.

Quick answer

Troubleshooting Scenario Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummultiple choice

Full question →

A company uses Amazon Bedrock Agents to process user requests that involve multiple steps, such as checking inventory and placing an order. The Agent sometimes fails to complete the workflow because it makes incorrect assumptions about the order of steps. What is the MOST effective way to guide the Agent's reasoning?

A
Implement the entire workflow in a single Lambda function and bypass the Agent's reasoning
Why wrong: This removes the Agent's dynamic reasoning capability, which is the core value of using an Agent.
B
Include explicit step‑by‑step instructions in the Agent's prompt or instruction template
Detailed instructions in the Agent's orchestration prompt help the Agent plan the correct sequence of actions.
C
Switch to a larger foundation model in the Agent configuration
Why wrong: A larger model might improve reasoning slightly, but without proper instructions it can still make sequencing errors.
D
Add more action groups to cover every possible step
Why wrong: More action groups provide more tools but do not teach the Agent the correct sequence to use them.

Full breakdown with real-world context →

Question 2mediummultiple choice

Full question →

Refer to the exhibit. A company has the S3 bucket policy shown above. The company uses Amazon Rekognition to analyze images in the 'my-images' bucket. An IAM role used by a Lambda function calls Rekognition. Why might Rekognition be unable to read images from the bucket?

Exhibit

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "rekognition.amazonaws.com"
      },
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::my-images/*",
      "Condition": {
        "StringEquals": {
          "aws:SourceAccount": "123456789012"
        }
      }
    }
  ]
}

A
The Lambda function does not have an IAM role that allows Rekognition to call S3
Why wrong: Rekognition does not assume the Lambda role; it uses the bucket policy.
B
The bucket policy does not grant Rekognition access to the bucket
Why wrong: The policy grants s3:GetObject to Rekognition service principal.
C
The bucket policy does not include PutObject permission
Why wrong: Rekognition only needs GetObject to read images.
D
The condition 'aws:SourceAccount' does not match the account of the Rekognition service
The condition ensures that the request originates from the specified account; if not, access is denied.

Full breakdown with real-world context →

Question 3hardmultiple choice

Full question →

An administrator reviews a CloudTrail log entry for a CreateModel API call. Which security concern should they investigate?

Exhibit

Refer to the exhibit.
[CloudTrail Log Entry]
{
  "eventVersion": "1.08",
  "userIdentity": {
    "type": "AssumedRole",
    "arn": "arn:aws:sts::123456789012:assumed-role/SageMakerExecutionRole/i-0123456789abcdef0",
    "accountId": "123456789012",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "arn": "arn:aws:iam::123456789012:role/SageMakerExecutionRole"
      }
    }
  },
  "eventTime": "2024-03-15T10:00:00Z",
  "eventSource": "sagemaker.amazonaws.com",
  "eventName": "CreateModel",
  "resources": [
    {
      "arn": "arn:aws:sagemaker:us-east-1:123456789012:model/my-model",
      "type": "AWS::SageMaker::Model"
    }
  ],
  "requestParameters": {
    "modelName": "my-model",
    "primaryContainer": {
      "image": "123456789012.dkr.ecr.us-east-1.amazonaws.com/my-image:latest",
      "modelDataUrl": "s3://my-bucket/model.tar.gz"
    },
    "executionRoleArn": "arn:aws:iam::123456789012:role/SageMakerExecutionRole"
  },
  "responseElements": null,
  "sourceIPAddress": "203.0.113.42",
  "userAgent": "sagemaker.amazonaws.com"
}

A
The model name is not encrypted in the log
Why wrong: CloudTrail logs are encrypted; model names are not sensitive.
B
The model data URL uses HTTP instead of HTTPS
HTTPS should be used to encrypt data in transit; using HTTP is a security risk.
C
The source IP address is an external IP
Why wrong: External IPs are normal; the concern is the lack of HTTPS.
D
The execution role ARN is visible in the log
Why wrong: Role ARNs are not secrets; they are identifiers.

Full breakdown with real-world context →

Question 4easymulti select

Full question →

A company wants to log all model invocation requests in Amazon Bedrock for audit and troubleshooting. Which TWO destinations can they configure for invocation logging? (Choose 2)

A
Amazon CloudWatch Logs
Invocation logs can be sent to CloudWatch Logs.
B
Amazon S3
Invocation logs can be written to an S3 bucket.
C
Amazon DynamoDB
Why wrong: DynamoDB is not supported as a log destination.
D
AWS CloudTrail
Why wrong: CloudTrail logs API calls, not model invocations.
E
Amazon Kinesis Data Firehose
Why wrong: Firehose is not a direct destination for Bedrock invocation logs.

Full breakdown with real-world context →

Question 5easymultiple choice

Full question →

A company uses Amazon Bedrock Agents to build an agent that interacts with users through a chat interface. The agent is configured with a knowledge base containing product documentation. Sometimes the agent fails to answer simple questions like 'What is your return policy?' and instead says it cannot find the answer. The knowledge base does contain the return policy. What is the most likely reason?

A
Increase the agent's maximum timeout for processing
Why wrong: Timeout is unlikely the issue if the agent quickly returns a failure; the agent is not waiting long enough to search.
B
Use a more powerful foundation model for reasoning
Why wrong: While a stronger model could interpret prompts better, the core issue is prompt guidance, not model capacity.
C
Add more documents to the knowledge base
Why wrong: The policy already exists; adding more data may increase noise and does not address the agent's failure to retrieve.
D
Simplify and clarify the agent's instruction prompt to emphasize knowledge base usage
A clear prompt instructing the agent to consult the knowledge base for all answers can dramatically improve consistency.

Full breakdown with real-world context →

These AIF-C01 practice questions are part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style AIF-C01 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Troubleshooting Scenario Questions

How to approach troubleshooting scenario questions

Quick answer

Related AIF-C01 topic practice pages

Applications of Foundation Models practice questions

Security, Compliance, and Governance for AI Solutions practice questions

Fundamentals of AI and ML practice questions

Fundamentals of Generative AI practice questions

Guidelines for Responsible AI practice questions

AIF-C01 fundamentals practice questions

AIF-C01 scenario practice questions

AIF-C01 troubleshooting practice questions

Practice scenarios

Refer to the exhibit. A company has the S3 bucket policy shown above. The company uses Amazon Rekognition to analyze images in the 'my-images' bucket. An IAM role used by a Lambda function calls Rekognition. Why might Rekognition be unable to read images from the bucket?

Exhibit

An administrator reviews a CloudTrail log entry for a CreateModel API call. Which security concern should they investigate?

Exhibit

A company wants to log all model invocation requests in Amazon Bedrock for audit and troubleshooting. Which TWO destinations can they configure for invocation logging? (Choose 2)