Free Amazon AIP-C01 Exam Questions

Question 1

A content moderation system needs to identify specific grammatical patterns in user-generated text, such as detecting imperative sentences (commands) or questions. The team wants to understand the grammatical structure and parts of speech (nouns, verbs, adjectives) in text before making moderation decisions.Which Amazon Comprehend feature should they use?

A : Sentiment analysis

B : Syntax analysis (part-of-speech tagging)

C : Entity recognition

D : Key phrase extraction

Answer: B

Question 2

An online gaming platform is launching a GenAI-powered support assistant using multiple Foundation Models (FMs) available in Amazon Bedrock (including Amazon Titan and Anthropic Claude). The security team has issued strict requirements for the assistant's input handling:PII Protection: Users must be prevented from submitting email addresses or phone numbers.Toxicity: Hate speech and insults must be blocked immediately.Custom Blocking: A specific list of known "cheat codes" and "exploit keywords" must be blocked from entering the model context.Consistency: These rules must apply uniformly across all used FMs without rewriting application logic for each model.Which solution should you implement to meet these requirements with the LEAST operational overhead?

A : Develop a pre-processing AWS Lambda function using the Python re library to detect PII patterns and cheat codes. Use Amazon Comprehend DetectSentiment API to identify hate speech. Configure the application to call this Lambda function and verify the result before calling InvokeModel on Amazon Bedrock.

B : Implement a standardized system prompt across all FMs that instructs the models to refuse to answer if the input contains emails, phone numbers, hate speech, or words from the cheat code list. Use the Amazon Bedrock Converse API to ensure the system prompt is strictly enforced by the model’s reasoning engine.

C : Use AWS WAF (Web Application Firewall) attached to the application load balancer handling the chat traffic. Create custom regex rules to block PII patterns and cheat codes. Enable the AWS Managed Rules for Anonymous IP List to reduce toxicity risks from bad actors.

D : Create an Amazon Bedrock Guardrail. Configure PII filters to block emails and phone numbers, and enable Content filters for hate speech. Use the Word filters feature to upload the list of cheat codes and exploit keywords. Associate the Guardrail with the InvokeModel API calls for all used FMs.

Answer: D

Question 3

A healthcare technology company is building a patient inquiry chatbot using Amazon Bedrock. Before logging conversation transcripts for quality assurance, they must ensure that all personally identifiable information (names, phone numbers, addresses, medical record numbers) is detected and redacted to comply with HIPAA privacy requirements.Which combination of AWS services should the developer use to detect and redact PII from conversation logs?

A : Use AWS CloudTrail to automatically redact PII from all logs

B : Use Amazon Textract to extract PII from documents, then delete the documents

C : Use Amazon Comprehend to detect PII entities, then use Amazon Bedrock Guardrails to redact them from logs

D : Use Amazon Macie to scan conversation logs stored in S3

Answer: C

Question 4

A large financial services enterprise is building a centralized platform to allow internal development teams to consume Foundation Models (FMs) from Amazon Bedrock. To ensure strict compliance and governance, the organization requires a "GenAI Gateway" architecture.The architecture must meet the following requirements:Prevent "Shadow AI" by forcing all internal applications to route requests through a single control point that logs every prompt and response for auditing.Automate the testing of prompt templates. Whenever a prompt engineer updates a standard system prompt, it must be automatically evaluated for toxicity and accuracy before being made available to applications.Ensure that PII is automatically redacted from prompts before they are sent to the model provider.Which combination of actions should you implement to achieve this?

A : Grant all internal application roles direct IAM permissions to bedrock:InvokeModel. Enable AWS CloudTrail data events for Amazon Bedrock to capture the request payloads and response bodies for auditing purposes.

B : Use Amazon Inspector within the CI/CD pipeline to scan the weights of the Amazon Bedrock base models for vulnerabilities and malware before approving them for use in the production environment.

C : Implement AWS AppSync with a direct data source to Amazon Bedrock. Use VTL resolvers to hardcode the system prompts within the API definition, ensuring that developers cannot modify them without redeploying the API.

D : Develop a centralized REST API using Amazon API Gateway and AWS Lambda. Configure the Lambda function to act as an abstraction layer that intercepts requests, uses Amazon Comprehend to detect and redact PII, logs the transaction to Amazon CloudWatch Logs, and then invokes Amazon Bedrock.

E : Create an AWS CodePipeline for prompt versioning. Include an AWS CodeBuild stage that runs an automated evaluation script (using a library like Ragas or specific Bedrock evaluations) against the new prompt candidate. Configure the pipeline to fail and rollback if the toxicity score exceeds a defined threshold.

Answer: D,E

Question 5

A development team is building a serverless application where AWS Lambda functions need to invoke Amazon Bedrock foundation models to generate product descriptions. The security team requires that the Lambda functions follow the principle of least privilege when accessing AWS services.Which approach should the developer implement to grant the Lambda function access to Amazon Bedrock?

A : Embed AWS access keys and secret keys as environment variables in the Lambda function configuration

B : Grant the Lambda function's IAM role full Administrator access to ensure it can call all AWS services

C : Attach an IAM role to the Lambda function with the bedrock:InvokeModel permission for the specific models being used

D : Store IAM credentials in the Lambda function code and rotate them manually every 90 days

Answer: C