AIP-C01 AI Safety Security And Governance Practice Question
A company is using RAG with Amazon Bedrock Knowledge Bases. They need to ensure that users can only retrieve documents they are authorized to see. How should this be implemented?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the filters attribute in the Retrieve API call based on document metadata
You must implement metadata filtering in the Knowledge Base query. When invoking Retrieve, you can apply filters based on user attributes stored in the document metadata.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Encrypt the documents with different KMS keys
Why it's wrong here
Encryption manages access to raw data, but does not filter semantic search results in RAG.
- ✗
Create separate Knowledge Bases for every user
Why it's wrong here
This is not scalable and management-intensive.
- ✗
Apply IAM policies to the S3 bucket
Why it's wrong here
The Knowledge Base indexer has access to the bucket, so S3 policies do not restrict RAG output.
- ✓
Use the filters attribute in the Retrieve API call based on document metadata
Why this is correct
The filter functionality in Retrieve allows restricting results based on metadata attributes like 'user_department'.
About these practice questions
Courseiva writes every AIP-C01 question from scratch — 181 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Amazon Web Services exam blueprint
This AIP-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIP-C01 exam.