Amazon AWS Certified Generative AI Developer - Professional AIP-C01 Practice Test 33

Question 320

An enterprise wants to approve an inference profile for use across accounts before deployment, but organization-level Region restrictions might block one or more required profile destinations. Which preflight governance check prevents future AccessDenied failures?

Allow only the source Region in the SCP and ignore other listed profile destinations.
Enable global routing without checking whether any listed destination violates organizational policy.
Grant broad S3 GetObject rights as a remedy for a model profile SCP denial.
Validate the profile’s actual required destination Regions against IAM and SCP policies and select or permit only a compliant profile before deployment.

Explanation

Correct Answer

Cross-Region inference requires permissions for the invoked profile and all necessary destination model resources; preflight the destination map against organization controls instead of waiting for runtime failure.

Incorrect Answers

The cross-Region request can fail when a required destination Region is denied.

A more flexible route can break compliance rather than fix permissions.

S3 permissions cannot override an SCP restriction on Bedrock model invocation.

Question 321

A restricted tenant uses a globally routed profile. Which security or privacy control closes the described gap?

Replace it with verified geography-based routing satisfying the actual data boundary.
Choose the global profile solely because it is accessed from an EU region.
Rely on the prefix of an inference profile ID without validating its current destination ARNs.
Keep personal data in EU S3 and let the inference model run anywhere.

Explanation

Correct Answer

For residency, inspect GetInferenceProfile destinations from each relevant source Region and select geography-constrained routing with actual permitted locations.

Incorrect Answers

The source endpoint does not constrain global profile destinations.

Documentation warns source-specific destination sets can differ and global routes evolve.

Storage geography does not prove processing geography.

Question 322

A knowledge base exposes confidential legal docs from another tenant. Which control is required in this deployment?

Send all legal documents to the model and ask it to avoid mentioning another tenant.
Filter retrieval by tenant ACL before passing chunks to model context.
Restrict only vector-store write permission, leaving cross-tenant read queries unrestricted.
Use a global semantic search index without tenant metadata and rely on relevance score.

Explanation

Correct Answer

Apply caller/tenant identity-derived access filters before retrieval hits reach the FM; a single vector index is not a substitute for document ACLs.

Incorrect Answers

Sensitive text has already been exposed in the context.

Write controls do not enforce read/tenant authorization.

Similarity cannot determine ownership or legal entitlement.

Question 323

A data lake containing HR documents is indexed by an unrestricted role. What should be verified for this identity, network or data boundary?

Give the Knowledge Base role read access to the entire HR data lake regardless of purpose.
Apply Lake Formation/S3 permissions and per-document access controls during retrieval.
Let search results show private employee text and hide the document URL in the UI.
Assume encryption at rest alone prevents an authorized but overprivileged role from reading documents.

Explanation

Correct Answer

Apply source-lake S3/Lake Formation authorization and preserve effective document permissions when moving content into embeddings and retrieval.

Incorrect Answers

Ingestion permissions can overexpose sensitive employee files.

Hiding citations does not secure retrieved content.

Encryption does not replace principal- and record-specific authorization.

Question 324

An S3 data source is encrypted with AWS-managed default keys but security policy explicitly requires a customer-managed KMS key. Select TWO necessary encryption and principal-permission changes.

Select supported bucket SSE-KMS customer-managed key.
Grant scoped KMS permissions to real ingestion/service roles.
Set an SSE-KMS key ID that the Knowledge Base role cannot decrypt and assume indexing still works.
Use anonymous SSE-S3 default key encryption when the policy explicitly mandates customer-managed keys.
Grant kms:* to every employee to avoid key-access failures.

Explanation

Correct Answer

Use a supported customer-managed KMS key for S3 source encryption according to customer policy.

Grant the real Bedrock ingestion/service role only the required KMS cryptographic operations for that key and source.

Incorrect Answers

KMS usage requires matching key policy and role permissions.

SSE-S3 does not meet a CMK-only requirement.

Wildcard key rights violate least-privilege and increase data exposure.

Question 325

A Bedrock invocation includes customer PII not needed for task. Which control is required in this deployment?

Forward every customer identifier because Bedrock encrypts transport.
Store the full prompt in a broad debug log before redacting the final answer.
Allow the FM to decide which input fields should have been withheld after receiving them.
Minimize/redact fields before sending the input to the model.

Explanation

Correct Answer

Filter PII fields to task-necessary values before inference; service selection or output moderation alone cannot undo unnecessary input sharing.

Incorrect Answers

Transport encryption does not establish purpose necessity.

Logs become a separate personal-data disclosure channel.

Exposure has already occurred before generation.

Question 326

A support chatbot should reveal only the last four account digits. What should be verified for this identity, network or data boundary?

Output full account numbers whenever the user prompt appears polite.
Mask identified sensitive numbers and enforce response field validation.
Remove account labels but leave every original digit in the result.
Trust the language model's generated mask without validating the returned field format.

Explanation

Correct Answer

Detect sensitive account spans and enforce a response contract that reveals only permitted last-four digits while masking remaining digits.

Incorrect Answers

Tone is not authorization for full identifier disclosure.

Removing a label does not mask the sensitive value.

A model may emit unmasked or incorrectly formatted IDs.

Question 327

A model log captures full personal health notes. Which security or privacy control closes the described gap?

Keep full raw patient narratives in a shared CloudWatch group for indefinite debugging.
Mask the web UI only, while preserving unredacted provider/runtime logs.
Restrict invocation log payloads, encryption, IAM and retention based on purpose.
Store the data in an encrypted bucket readable by every employee.

Explanation

Correct Answer

Minimize invocation payload logging and restrict retained health notes by IAM, encryption and retention; diagnostic usefulness must not override confidentiality.

Incorrect Answers

Logging creates a sensitive duplicate data set with broad exposure.

Backend logs can still disclose health data.

Encryption alone does not enforce appropriate reader access.

Question 328

An S3 log bucket preserves raw prompts longer than policy allows. Which control is required in this deployment?

Remove the log bucket from dashboards while leaving its objects for indefinite retention.
Set a short browser cache expiration and assume it deletes S3 log objects.
Configure lifecycle retention/deletion and validate storage/legal holds.
Delete legally held evidence indiscriminately to meet an arbitrary shorter TTL.

Explanation

Correct Answer

Apply appropriate S3 object lifecycle deletion/retention (subject to legal hold) and verify that expired raw prompts are no longer accessible.

Incorrect Answers

UI visibility does not alter stored data lifecycle.

Client caching does not control backend object retention.

Retention rules must accommodate valid legal holds and governance obligations.

Question 329

A user requests data deletion but KB chunks remain indexed. What should be verified for this identity, network or data boundary?

Propagate deletion to knowledge base vector store and verify caches are cleared.
Delete the original S3 file only and assume every downstream vector disappears immediately.
Hide the document link while leaving extracted text in the vector store.
Revoke the user session only and leave shared KB data unchanged.

Explanation

Correct Answer

Delete authorized source records and synchronize Knowledge Base ingestion/vector indexes and application caches; verify retrieval no longer returns revoked chunks.

Incorrect Answers

Indexed embeddings and caches can remain until synchronization.

The content remains retrievable even without a visible URL.

Session termination does not delete persisted derived source data.

Question 330

An application uses an IAM user secret baked into ECS image. Which security or privacy control closes the described gap?

Replace with scoped task role or workload credentials, revoke exposed key.
Rotate the hardcoded secret only when the container image is rebuilt annually.
Set the environment variable name to an obscure string without removing the secret.
Give every ECS task a common AdministratorAccess policy instead of a user key.

Explanation

Correct Answer

Use an ECS task role or equivalent workload identity with scoped permissions; revoke the exposed static IAM user secret embedded in the image.

Incorrect Answers

An exposed long-lived key remains a compromise risk.

Obfuscation cannot secure credentials in deployed artifacts.

Workload identity is useful only with least-privilege resource permissions.

Pass Your Amazon AWS Certified Generative AI Developer - Professional AIP-C01 Exam Easy!

Question 320

Explanation

Correct Answer

Incorrect Answers

Question 321

Explanation

Correct Answer

Incorrect Answers

Question 322

Explanation

Correct Answer

Incorrect Answers

Question 323

Explanation

Correct Answer

Incorrect Answers

Question 324

Explanation

Correct Answer

Incorrect Answers

Question 325

Explanation

Correct Answer

Incorrect Answers

Question 326

Explanation

Correct Answer

Incorrect Answers

Question 327

Explanation

Correct Answer

Incorrect Answers

Question 328

Explanation

Correct Answer

Incorrect Answers

Question 329

Explanation

Correct Answer

Incorrect Answers

Question 330

Explanation

Correct Answer

Incorrect Answers

AWS Certified Generative AI Developer - Professional AIP-C01 Practice Tests