AIP-C01 · domain
Foundation Model Integration Data And Compliance
This domain covers how Amazon Bedrock integrates foundation models with your data while meeting governance requirements. It tests invocation logging, IAM-based access control, Knowledge Base data sources, and cost drivers. Expect scenario questions asking you to select the correct service, configure secure access, or reason about retrieval architecture and operational cost.
Focused practice
Practice Foundation Model Integration Data And Compliance questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Foundation Model Integration Data And Compliance
You must be able to configure secure Bedrock access with IAM, enable invocation logging for compliance, choose valid Knowledge Base sources, and estimate cost drivers. The most important thing is knowing that access control and logging are separate, explicit configurations, not automatic defaults.
Configuring Bedrock Model Invocation Logs to CloudWatch Logs or Amazon S3 for audit trails
Using AWS IAM policies and roles to control access to Bedrock models and Knowledge Bases
Identifying supported Knowledge Base sources such as Amazon S3 and web crawlers
Analyzing cost factors including ingestion, storage, retrieval, and foundation model token usage
Watch out for
Common Foundation Model Integration Data And Compliance exam traps
- ▸Assuming Model Invocation Logs are enabled by default; they must be explicitly configured and require proper IAM permissions.
- ▸Confusing Knowledge Base data sources with unsupported sources like relational databases or streaming services.
- ▸Overlooking that retrieval and generation both consume tokens, so Knowledge Base cost depends on query volume and model choice.
Question index
All Foundation Model Integration Data And Compliance questions (49)
Click any question to see the full explanation, or start a practice session above.
Which TWO factors are critical when choosing a model for a RAG architecture that requires high grounding accuracy?
Medium2A team is evaluating different models on Amazon Bedrock. They want to compare the performance of Claude 3 Sonnet versus Llama 3 on a specific prompt set without writing custom scripts. Which tool should they use?
Easy3A company is building a RAG application using Amazon Bedrock and needs to ensure that the data ingested into the knowledge base is filtered based on user identity. Which approach should the developer use?
Medium4What is the purpose of 'Foundation Models' (FMs) in the context of Amazon Bedrock?
Easy5When should a developer choose to fine-tune a model versus using RAG?
Medium6A developer needs to handle documents that are too large to fit in a single prompt. What is the most recommended approach?
Medium7Which metric should a developer monitor to ensure the RAG system remains performant as usage increases?
Medium8An organization wants to use a model that supports both text and image input. Which family of foundation models should they select in Amazon Bedrock?
Medium9What is the primary role of an Embedding Model in a RAG pipeline?
Easy10Which TWO types of models are generally available in Amazon Bedrock?
Medium11When designing a RAG system, why would a developer choose Amazon Titan Text Embeddings over a third-party embedding model?
Medium12A company is building a RAG application on Amazon Bedrock. They need to store embeddings for a large-scale knowledge base with low-latency similarity search and full integration with LangChain. Which vector database should the developer recommend?
Easy13A developer is building a RAG application using Amazon Bedrock Knowledge Bases. The knowledge base is configured with an Amazon OpenSearch Serverless vector store. They notice that queries are returning irrelevant results. They suspect that the chunking strategy is not optimal for their documents, which are technical manuals with long paragraphs and code snippets. Which action should they take to improve retrieval accuracy?
Hard14Which data format is best suited for ingestion into an Amazon Bedrock Knowledge Base?
Easy15A developer wants to ensure that a generative AI application does not provide medical advice. How should they configure this?
Medium16When using a Knowledge Base, what is the 'Base Prompt' used for?
Medium17A company is using Amazon Bedrock to generate product descriptions. They want to ensure that the model's responses do not include harmful or inappropriate content. They also need to monitor and log any blocked content for auditing. Which Bedrock feature should they use?
Easy18An organization is concerned about data residency requirements for their AI models. Where should they look to identify which AWS regions support specific models?
Medium19A company is building a RAG application using Amazon Bedrock and needs to ensure that sensitive PII is filtered out before it reaches the foundation model. Which feature should be used to achieve this?
Medium20A business requirement is to ensure that the RAG model output is grounded solely in the provided documents. How can this be enforced?
Hard21A developer wants to ensure that the RAG pipeline is resilient to outages. What architectural pattern should be used?
Medium22A company is concerned about model provider policy compliance. Where can they find the specific data processing terms for their chosen model?
Medium23A security auditor requests a report on Bedrock usage. Which TWO of the following AWS services can be used to generate this report?
Hard24Which THREE actions can a developer take to mitigate hallucinations in a RAG application?
Medium25Which THREE items must be configured when setting up a new Knowledge Base in Amazon Bedrock?
Medium26What is the primary function of the Bedrock 'Model Invocation Logs'?
Easy27A developer wants to choose a foundation model in Amazon Bedrock that offers the best balance of reasoning capability and latency for a customer support chatbot. Which tool should the developer use to evaluate models?
Easy28When designing for compliance, which THREE actions are part of the 'Shared Responsibility Model' for an AWS customer?
Hard29Which API call in Amazon Bedrock is used to trigger a text generation request without a Knowledge Base?
Easy30Which of the following is a recommended practice when working with Bedrock APIs?
Easy31A healthcare company requires that all generative AI outputs be filtered for PII (Personally Identifiable Information) before being sent to the end user. Which Amazon Bedrock feature effectively manages this compliance requirement?
Hard32Which TWO of the following are valid ways to improve the relevance of retrieved documents in a RAG system?
Medium33Which THREE factors influence the cost of running an Amazon Bedrock Knowledge Base?
Hard34A developer is building a generative AI application using Amazon Bedrock and needs to ensure that all API calls to the Bedrock runtime are logged for auditing purposes. The logs must include the request and response payloads, and must be retained for 90 days. The developer wants to minimize operational overhead. Which solution meets these requirements?
Easy35Which AWS service is used to monitor and log the prompts sent to an Amazon Bedrock model for auditing purposes?
Easy36A financial services firm is building a RAG application using Amazon Bedrock Knowledge Bases. They need to ensure that the vector embeddings for their proprietary documents are stored in a way that meets strict data residency requirements. The documents are stored in an Amazon S3 bucket in the eu-west-1 region. They want to use Amazon OpenSearch Serverless as the vector store. Which configuration should they choose?
Hard37A company wants to provide users with citations for the AI-generated answers in their RAG system. How is this achieved in Amazon Bedrock?
Hard38Which service should be used to manage user access to Amazon Bedrock models?
Easy39How can a developer ensure that the retrieval step in a RAG application focuses only on the most relevant documents when the knowledge base contains millions of files?
Hard40Which TWO of the following are supported as source data for Amazon Bedrock Knowledge Bases?
Medium41A developer needs to measure the quality of a RAG application's responses. Which tool within Amazon Bedrock facilitates this?
Medium42A developer is designing a RAG system and wants to ensure high-quality retrieval. Which THREE techniques should be implemented to improve semantic search relevance?
Hard43Which Amazon Bedrock feature allows developers to restrict user queries based on specific topics or harmful content categories?
Easy44What is the primary benefit of using a 'System Prompt' in Bedrock?
Easy45An organization is deploying a RAG architecture using Amazon Bedrock and Amazon OpenSearch Serverless. The security team requires that all data remain within the VPC. How should the developer configure the integration?
Medium46A compliance team requires that all prompts containing sensitive data be encrypted. How does Amazon Bedrock handle this during the request?
Medium47When migrating an on-premises RAG system to Amazon Bedrock, how should the team handle existing vector embeddings?
Hard48A developer is configuring a RAG system and wants to ensure the model has access to the most recent data. How should they handle updates?
Medium49When preparing data for a Knowledge Base, why is it recommended to remove PII?
MediumOther domains
All AIP-C01 exam domains
Frequently asked questions
- What does the Foundation Model Integration Data And Compliance domain cover on the AIP-C01 exam?
- You must be able to configure secure Bedrock access with IAM, enable invocation logging for compliance, choose valid Knowledge Base sources, and estimate cost drivers. The most important thing is knowing that access control and logging are separate, explicit configurations, not automatic defaults.
- How many questions are in this domain?
- This page lists all 49 Foundation Model Integration Data And Compliance questions in the AIP-C01 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Foundation Model Integration Data And Compliance questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.