AI Safety Security And Governance

Your organization needs to ensure that only authorized IAM users can access specific foundation models in Bedrock. Which configuration is required?

A firm wants to audit the specific version of a foundation model used for every inference request. How can they achieve this?

A company is using RAG with Amazon Bedrock Knowledge Bases. They need to ensure that users can only retrieve documents they are authorized to see. How should this be implemented?

Which TWO steps are required to properly secure Bedrock Knowledge Bases?

A researcher wants to ensure the model output does not reference external websites. How can this be enforced?

A team is storing sensitive documents for RAG. They need to ensure that the document chunks in the vector database are encrypted at rest. How?

When fine-tuning a model on Amazon Bedrock, which THREE security considerations are critical?

A developer needs to ensure that an application only uses approved foundation models. How can they govern this centrally?

Which service should be used to monitor the cost and usage of API requests made to Amazon Bedrock models?

An enterprise requires that all Generative AI model outputs are logged for compliance, but logs must not contain any PII. How can this be achieved in an AWS environment using Amazon Bedrock?

You are designing a secure Generative AI architecture on AWS. Which TWO of the following are recommended practices for securing the data ingestion pipeline for RAG?

To prevent accidental deletion of a Knowledge Base, which feature should be applied?

You are deploying a Generative AI application using Amazon SageMaker JumpStart. You need to ensure that the model endpoint is protected against prompt injection attacks. Which approach is most effective?

A developer needs to monitor their Bedrock application for potential abuse. Which TWO features should they utilize?

Which THREE services/features are essential for establishing a secure perimeter for an Amazon Bedrock deployment?

Which THREE strategies should be implemented to ensure responsible AI practices in a production workload?

You need to ensure that all data sent to an Amazon Bedrock model is encrypted in transit using private connectivity. What is the recommended service?

A company is using a third-party model via Bedrock and needs to ensure that the model provider does not use their data to train their base models. What must they do?

Which THREE items should be included in an AI application's security documentation for an audit?

When implementing a RAG-based application, which TWO of the following ensure document security?

To ensure compliance with data residency requirements, you must restrict which AWS regions your Generative AI application can process data. What is the most effective way to enforce this?

A developer needs to share a Bedrock prompt template with another team securely. What is the recommended method?

A business wants to restrict the length of generated outputs to prevent high costs. How can this be done?

When dealing with PII in Generative AI, which THREE practices are recommended?

Which AWS tool is used to monitor the performance and latency of an application calling Bedrock?

What is the role of an AWS Service Control Policy (SCP) in an AI governance framework?

An organization is concerned about 'Model Hallucinations' and needs a way to ground model outputs in trusted company documents. Which service supports this?

A company is using Amazon Q Business. How can they restrict access to specific data sources for different groups of users?

Which TWO of the following actions can help mitigate the risk of 'prompt injection' in a Generative AI application?

You are building a chat application and notice sensitive internal data is leaking in responses. You have enabled Guardrails. What else should be checked?

Which service should be used to provide secure identity and access management for an application accessing Bedrock?

Which TWO features of Amazon Bedrock provide governance capabilities?

A company requires that every AI-generated document must include a watermark for traceability. How can this be handled in Bedrock?

A team wants to track who accessed a model and when. Which service provides this audit log?

Which THREE of the following are components of a robust AI governance framework in an AWS environment?

A company is using Amazon Bedrock to build a customer support chatbot and needs to ensure that PII is masked before the request reaches the foundation model. Which feature should the developer implement?

Your organization wants to evaluate the quality and safety of model outputs using a formal testing framework. Which service is designed for this?

A developer wants to prevent the Generative AI application from producing content related to hate speech or violence. What is the most efficient configuration in Amazon Bedrock?

A firm needs to ensure that all Generative AI model training data, if used for fine-tuning, is compliant with GDPR. Where should the training data reside?