Courseiva
Foundation Model Integration Data And CompliancemediumMultiple ChoiceObjective-mapped

AIP-C01 Practice Question: Foundation Model Integration Data And Compliance

A company is building a RAG application using Amazon Bedrock and needs to ensure that the data ingested into the knowledge base is filtered based on user identity. Which approach should the developer use?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Use Amazon Bedrock Knowledge Base metadata filtering during the retrieval phase to apply access controls.

Knowledge Base filters allow you to restrict retrieval results based on metadata attributes associated with the document chunks.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Use Amazon Bedrock Knowledge Base metadata filtering during the retrieval phase to apply access controls.

    Why this is correct

    Metadata filtering allows precise control over which documents are retrieved during query time based on user-specific attributes.

  • Use Lambda authorizers to filter the retrieved results after they are returned by the model.

    Why it's wrong here

    Filtering should happen during retrieval to ensure context window efficiency and security.

  • Create separate vector indexes for every user role within the Knowledge Base configuration.

    Why it's wrong here

    This is not a supported configuration for Amazon Bedrock Knowledge Bases.

  • Implement fine-grained access control using IAM policies on the S3 bucket containing the source data.

    Why it's wrong here

    IAM policies control access to the bucket, not specific search results within a vector database.

About these practice questions

Courseiva writes every AIP-C01 question from scratch — 181 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Amazon Web Services exam blueprint

This AIP-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIP-C01 exam.