AIP-C01 Practice Questions

Question 1

A company is using Amazon Q Business. How can they restrict access to specific data sources for different groups of users?

Accepted Answer

Configure ACLs in the data source connector. Amazon Q Business respects access control lists (ACLs) configured in the data source connector, so documents are only surfaced to users who have permission in the source system. When the connector indexes content, it ingests ACL information and enforces it at query time, ensuring each user sees only authorized data. This is the correct mechanism for restricting access to specific data sources per user group.

Answer

Create separate Amazon Q applications

Answer

Manually delete documents for specific users

Answer

Apply IAM policies to the user's login

Question 2

You need to ensure that all data sent to an Amazon Bedrock model is encrypted in transit using private connectivity. What is the recommended service?

Accepted Answer

AWS PrivateLink (VPC Endpoints). AWS PrivateLink (VPC Endpoints) is the recommended service because it creates a private, one-way connection between a VPC and Amazon Bedrock using interface endpoints powered by ENIs, keeping traffic on the AWS backbone and off the public internet. This satisfies the requirement for private connectivity with encryption in transit (TLS) to the Bedrock endpoint. It avoids the need for internet gateways, NAT devices, or public IPs.

Answer

AWS WAF

Answer

AWS CloudFront

Answer

AWS Certificate Manager

Question 3

Which SageMaker feature allows you to observe model performance drifts over time?

Accepted Answer

SageMaker Model Monitor. SageMaker Model Monitor automatically detects data drift, concept drift, and model quality issues.

Answer

SageMaker Pipelines

Answer

SageMaker Data Wrangler

Answer

SageMaker Clarify

Question 4

When configuring an Amazon Bedrock Knowledge Base, which setting helps optimize the retrieval process for RAG applications?

Accepted Answer

Adjusting the chunk size and overlap. Selecting the appropriate embedding model and defining chunks size are key to optimizing retrieval quality and performance.

Answer

Increasing the number of input tokens

Answer

Deleting the data source

Answer

Disabling encryption

Question 5

What is the primary function of the Bedrock 'Model Invocation Logs'?

Accepted Answer

To capture and store prompt/response payloads for auditing.. These logs are used for auditing and debugging by capturing the request and response payloads.

Answer

To throttle incoming requests.

Answer

To perform real-time model retraining.

Answer

To reduce inference costs.

Question 6

Which service should be used to manage user access to Amazon Bedrock models?

Accepted Answer

AWS IAM.. AWS IAM (Identity and Access Management) is the service used to control access to AWS resources, including Bedrock APIs.

Answer

Amazon Route 53.

Answer

Amazon SageMaker.

Answer

AWS Glue.

Question 7

A healthcare company is building a generative AI assistant on Amazon Bedrock that summarizes patient records. The compliance team requires that the assistant's outputs are traceable and that any harmful or biased content is detected before being shown to clinicians. The company wants to use AWS-native services and features. (Choose two.)

Accepted Answer

Enable model invocation logging in Amazon Bedrock to capture request and response metadata to Amazon CloudWatch Logs and Amazon S3.. Amazon Bedrock Guardrails evaluates prompts and completions against configurable policies to block harmful or biased content before it is presented, while model invocation logging captures detailed request and response data for traceability. Together they provide both preventive content moderation and a durable audit trail. AWS WAF, Amazon Macie, and AWS Trusted Advisor operate at different layers and cannot inspect or record natural language content for bias or harmful material.

Answer

Use AWS Trusted Advisor to review the Bedrock model for ethical AI compliance.

Answer

Enable Amazon Macie to automatically redact biased statements from Bedrock responses.

Answer

Configure AWS WAF to inspect the generative AI responses for biased language.

Question 8

You are building a chat application and notice sensitive internal data is leaking in responses. You have enabled Guardrails. What else should be checked?

Accepted Answer

Review the system prompt and the Knowledge Base document retrieval filters. Guardrails filter model inputs and outputs, but they do not control what data enters the prompt in the first place. If sensitive internal data is leaking, the likely sources are the system prompt (which may contain secrets or instructions that surface data) or the Knowledge Base retrieval filters (which may be returning documents the user should not see). Reviewing both is the correct next step.

Answer

Change the foundation model provider

Answer

Increase the temperature setting

Answer

Check if the model is fine-tuned on public data

Question 9

Which TWO of the following are supported as source data for Amazon Bedrock Knowledge Bases?

Accepted Answer

Atlassian Confluence.. S3 is the primary supported source, and Confluence is also natively supported as a data source.

Answer

Email server logs.

Answer

Social media live streams.

Answer

Local hard drive files.

Question 10

You are implementing a multi-agent system. Which method is most effective for ensuring the agents do not loop infinitely when coordinating tasks?

Accepted Answer

Implementing a maximum iteration count. A maximum iteration count (or recursion/step limit) is the standard guardrail in agent orchestration frameworks like LangChain, LangGraph, and AWS Bedrock Agents to bound execution. When agents can call each other or themselves, a hard cap on turns prevents runaway loops that burn tokens and never terminate. Once the cap is hit, the orchestrator returns the best partial result or raises a controlled error.

Answer

Caching agent responses

Answer

Increasing the model temperature

Answer

Using a smaller model

Question 11

Which THREE factors influence the cost of running an Amazon Bedrock Knowledge Base?

Accepted Answer

The amount of data stored in the vector database.. Option A is correct because an Amazon Bedrock Knowledge Base stores its embeddings in a vector store (for example, Amazon OpenSearch Serverless, Aurora pgvector, or Neptune Analytics), and the cost of that vector database scales with the volume of data/vectors stored. Option B is correct because the RetrieveAndGenerate API invokes a foundation model to generate the final answer, and you are billed for the input and output tokens the model consumes during that generation step. Option D is correct because ingesting documents into the knowledge base requires calling a Bedrock embedding model (such as Amazon Titan Text Embeddings), and you pay per token processed by that embedding model. Option C is not a Bedrock Knowledge Base cost factor because IAM users are free and concurrency of users does not drive Bedrock or vector-store charges. Option E is not correct because there is no per-scan charge for S3 buckets; S3 charges are based on storage, requests, and data transfer, not on how often the knowledge base syncs or scans the bucket.

Answer

The number of concurrent IAM users.

Answer

The frequency of S3 bucket scans.

Question 12

You are designing a RAG pipeline. Which step in the ingestion process is responsible for converting unstructured text into a numerical representation?

Accepted Answer

Embedding. Embedding is the step that converts text chunks into dense numerical vectors (embeddings) that capture semantic meaning. These vectors are then stored in a vector database so that similarity search can retrieve relevant chunks at query time. Without embedding, the RAG pipeline cannot perform semantic retrieval.

Answer

Chunking

Answer

Indexing

Answer

Parsing

Question 13

Which service should be used to provide secure identity and access management for an application accessing Bedrock?

Accepted Answer

AWS IAM. AWS IAM is the correct service for providing secure identity and access management for applications accessing Amazon Bedrock. IAM roles and policies define precisely which Bedrock actions (such as InvokeModel, RetrieveAndGenerate) an application or user can perform, and IAM roles can be assumed by compute resources like Lambda functions or EC2 instances to obtain temporary credentials. This is the foundational AWS access control mechanism that Bedrock integrates with natively for authorization.

Answer

AWS Secrets Manager

Answer

AWS Directory Service

Answer

Amazon Cognito

Question 14

How can a developer ensure that the retrieval step in a RAG application focuses only on the most relevant documents when the knowledge base contains millions of files?

Accepted Answer

Implement metadata filtering in the query.. Metadata filtering (A) allows the retrieval step to narrow down the search space by applying filters on document attributes (e.g., date, category, author) before performing vector similarity search. This ensures that only documents matching the filter criteria are considered, improving relevance and reducing noise when the knowledge base is large.

Answer

Increase the vector dimension size.

Answer

Use a larger model for embedding.

Answer

Reduce the chunk size.

Question 15

You are using a Bedrock Knowledge Base. You need to ensure that the search results are highly relevant to technical documentation. Which setting should you adjust?

Accepted Answer

Change the search type to HYBRID. Changing the search type to HYBRID in a Bedrock Knowledge Base combines semantic (vector) search with keyword-based (lexical) search, which significantly improves relevance for technical documentation containing specific terms, acronyms, error codes, and product names that pure semantic search may miss. Hybrid search merges results from both retrieval methods, capturing both conceptual similarity and exact keyword matches, making it ideal for technical content where precise terminology matters.

Answer

Update the S3 bucket policy

Answer

Increase the temperature

Answer

Change the model ID

AWS Certified Generative AI Developer - Professional AIP-C01 practice test

Three ways to study

Study AIP-C01 by domain

Study AIP-C01 by topic

Foundation Model Integration Data And Compliance practice questions

Testing Validation And Troubleshooting practice questions

AI Safety Security And Governance practice questions

Implementation And Integration practice questions

Operational Efficiency And Optimization practice questions

AIP-C01 fundamentals practice questions

AIP-C01 scenario practice questions

AIP-C01 troubleshooting practice questions

AWS Certified Generative AI Developer - Professional (AIP-C01) (AIP-C01) practice questions