AWS Certified AI Practitioner AIF-C01 Practice Test 44
Question 430
A high-impact customer eligibility model has borderline cases needing a human decision. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A reviewed design record approves this competing approach: Use lower latency as proof that human review is unnecessary
- A system inventory lists this competing approach as active: Automatically approve every high-confidence output without defined controls
- Recorded reviewer decisions resolve flagged cases before final action
- A component test invokes this alternate approach successfully: Treat a guardrail toxicity filter as the final eligibility reviewer
Explanation
Correct Answer
C:Recorded reviewer decisions resolve flagged cases before final action. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Faster inference is not evidence of acceptable decision risk Design approval is not evidence that the alternative meets the actual requirement.
B:Confidence alone may not meet policy for sensitive outcomes An active setting cannot independently prove the requested business outcome.
D:Toxicity filtering does not replace human eligibility judgment A component invocation does not validate the necessary end-to-end outcome.
Question 431
An untrusted retrieved web page tells an agent to ignore permissions and export customer records. A pilot uses this approach instead: Obey any instruction found in a retrieved document. Which limitation MOST DIRECTLY explains why the requirement is not met?
- Prompt injection in lower-trust context must not override tool permissions
- External content can be adversarial and is not an authorized operator
- Output filtering cannot replace least-privilege tool permissions
- Removing logs prevents investigation and does not stop injection
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Obey any instruction found in a retrieved document. External content can be adversarial and is not an authorized operator
Incorrect Answers
A:Prompt injection in lower-trust context must not override tool permissions This explains the recommended design, but it is not the requested diagnosis of Obey any instruction found in a retrieved document.
C:This limitation concerns Assume content filters alone grant safe access to payment APIs; it does not diagnose the proposed Obey any instruction found in a retrieved document approach.
D:This limitation concerns Disable all tool audit logs to reduce warning noise; it does not diagnose the proposed Obey any instruction found in a retrieved document approach.
Question 432
A finance team must protect stored AI training data with customer-controlled cryptographic keys. Which option BEST meets the business requirement?
- Use CloudTrail as the encryption engine
- Use public model guardrail word lists as the KMS key policy
- Use supported encryption at rest with AWS KMS key management
- Rely on HTTPS alone as at-rest encryption
Explanation
Correct Answer
C:KMS helps manage keys used by integrated services for stored data The specified scenario makes this the most appropriate approach.
Incorrect Answers
A:CloudTrail records actions rather than encrypting objects This prevents the approach from meeting the stated requirement.
B:Text filters do not manage cryptographic keys This prevents the approach from meeting the stated requirement.
D:Transport encryption does not protect stored data by itself This prevents the approach from meeting the stated requirement.
Question 433
A finance team must protect stored AI training data with customer-controlled cryptographic keys. During a design review, someone proposes Use CloudTrail as the encryption engine. Which technical objection is specifically relevant to this proposal?
- Transport encryption does not protect stored data by itself
- KMS helps manage keys used by integrated services for stored data
- Text filters do not manage cryptographic keys
- CloudTrail records actions rather than encrypting objects
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Use CloudTrail as the encryption engine. CloudTrail records actions rather than encrypting objects
Incorrect Answers
A:This limitation concerns Rely on HTTPS alone as at-rest encryption; it does not diagnose the proposed Use CloudTrail as the encryption engine approach.
B:KMS helps manage keys used by integrated services for stored data This explains the recommended design, but it is not the requested diagnosis of Use CloudTrail as the encryption engine.
C:This limitation concerns Use public model guardrail word lists as the KMS key policy; it does not diagnose the proposed Use CloudTrail as the encryption engine approach.
Question 434
An untrusted retrieved web page tells an agent to ignore permissions and export customer records. During a design review, someone proposes Disable all tool audit logs to reduce warning noise. Which technical objection is specifically relevant to this proposal?
- Prompt injection in lower-trust context must not override tool permissions
- Removing logs prevents investigation and does not stop injection
- Output filtering cannot replace least-privilege tool permissions
- External content can be adversarial and is not an authorized operator
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Disable all tool audit logs to reduce warning noise. Removing logs prevents investigation and does not stop injection
Incorrect Answers
A:Prompt injection in lower-trust context must not override tool permissions This explains the recommended design, but it is not the requested diagnosis of Disable all tool audit logs to reduce warning noise.
C:This limitation concerns Assume content filters alone grant safe access to payment APIs; it does not diagnose the proposed Disable all tool audit logs to reduce warning noise approach.
D:This limitation concerns Obey any instruction found in a retrieved document; it does not diagnose the proposed Disable all tool audit logs to reduce warning noise approach.
Question 435
A business agent should call external APIs on behalf of users without sharing one permanent master credential. Before approving a rollout, an architect suggests Use vector similarity as proof of permission to invoke an API. Which mismatch should be documented for this precise design?
- Shared high-privilege credentials create excessive blast radius
- Identity-aware agents should authenticate to tools with appropriate caller scope
- Plain language is not a cryptographically verified identity
- Semantic relevance does not establish the caller's authority
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Use vector similarity as proof of permission to invoke an API. Semantic relevance does not establish the caller's authority
Incorrect Answers
A:This limitation concerns Give all agents a permanent account-wide administrative secret; it does not diagnose the proposed Use vector similarity as proof of permission to invoke an API approach.
B:Identity-aware agents should authenticate to tools with appropriate caller scope This explains the recommended design, but it is not the requested diagnosis of Use vector similarity as proof of permission to invoke an API.
C:This limitation concerns Rely on a prompt statement that the user is authorized; it does not diagnose the proposed Use vector similarity as proof of permission to invoke an API approach.
Question 436
A procurement team asks for AWS third-party compliance reports and agreements. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A reviewed design record approves this competing approach: Assume a customer-authored model card constitutes AWS SOC evidence
- A component test invokes this alternate approach successfully: Use CloudTrail events as an external auditor's signed report
- A system inventory lists this competing approach as active: Use AWS Config as the repository for signed AWS third-party audits
- The correct report is downloaded with its applicable scope and dates
Explanation
Correct Answer
D:The correct report is downloaded with its applicable scope and dates. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Model documentation is not AWS provider certification evidence Design approval is not evidence that the alternative meets the actual requirement.
B:Account activity logs do not replace provider audit reports A component invocation does not validate the necessary end-to-end outcome.
C:Config focuses on resource configuration, not compliance report distribution An active setting cannot independently prove the requested business outcome.
Question 437
A security team wants to discover possible personally identifiable information in an S3 corpus for an AI project. A pilot uses this approach instead: Use Amazon Polly voice generation to find customer PII. Which limitation MOST DIRECTLY explains why the requirement is not met?
- API request counts do not identify PII within stored objects
- Speech synthesis is not stored-object sensitive-data scanning
- Macie can find sensitive data patterns in S3 and produce findings
- Access policy limits access but does not analyze content for PII
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Use Amazon Polly voice generation to find customer PII. Speech synthesis is not stored-object sensitive-data scanning
Incorrect Answers
A:This limitation concerns Use a CloudTrail event count as a list of exposed personal fields; it does not diagnose the proposed Use Amazon Polly voice generation to find customer PII approach.
C:Macie can find sensitive data patterns in S3 and produce findings This explains the recommended design, but it is not the requested diagnosis of Use Amazon Polly voice generation to find customer PII.
D:This limitation concerns Use IAM roles alone as a sensitive-data classifier; it does not diagnose the proposed Use Amazon Polly voice generation to find customer PII approach.
Question 438
An AI chat app exchanges sensitive requests with a backend over a public network. A pilot uses this approach instead: Rely on S3 bucket versioning as the network encryption. Which limitation MOST DIRECTLY explains why the requirement is not met?
- TLS reduces exposure of data in transit between endpoints
- Instructions to a model cannot encrypt network packets
- Stored-data encryption does not cover unencrypted transit
- Versioning protects object history rather than network sessions
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Rely on S3 bucket versioning as the network encryption. Versioning protects object history rather than network sessions
Incorrect Answers
A:TLS reduces exposure of data in transit between endpoints This explains the recommended design, but it is not the requested diagnosis of Rely on S3 bucket versioning as the network encryption.
B:This limitation concerns Treat a model safety prompt as transport confidentiality; it does not diagnose the proposed Rely on S3 bucket versioning as the network encryption approach.
C:This limitation concerns Use only at-rest encryption and send plaintext HTTP; it does not diagnose the proposed Rely on S3 bucket versioning as the network encryption approach.
Question 439
An auditor needs to know which principal invoked a production AI administration API and when. Before approving a rollout, an architect suggests Store an unverified spreadsheet of claimed actions. Which mismatch should be documented for this precise design?
- An editable assertion is not provider-recorded API history
- CloudTrail records AWS account API activity for security audits
- Quality scores do not identify callers or timestamps
- Model responses do not prove actual service API events
Explanation
Correct Answer
A:This is the actual failure mode of the proposed approach: Store an unverified spreadsheet of claimed actions. An editable assertion is not provider-recorded API history
Incorrect Answers
B:CloudTrail records AWS account API activity for security audits This explains the recommended design, but it is not the requested diagnosis of Store an unverified spreadsheet of claimed actions.
C:This limitation concerns Use only a model's benchmark score as the actor log; it does not diagnose the proposed Store an unverified spreadsheet of claimed actions approach.
D:This limitation concerns Use model generated prose as the authoritative account activity log; it does not diagnose the proposed Store an unverified spreadsheet of claimed actions approach.
Question 440
A business agent should call external APIs on behalf of users without sharing one permanent master credential. A pilot uses this approach instead: Give all agents a permanent account-wide administrative secret. Which limitation MOST DIRECTLY explains why the requirement is not met?
- Shared high-privilege credentials create excessive blast radius
- Semantic relevance does not establish the caller's authority
- Plain language is not a cryptographically verified identity
- Identity-aware agents should authenticate to tools with appropriate caller scope
Explanation
Correct Answer
A:This is the actual failure mode of the proposed approach: Give all agents a permanent account-wide administrative secret. Shared high-privilege credentials create excessive blast radius
Incorrect Answers
B:This limitation concerns Use vector similarity as proof of permission to invoke an API; it does not diagnose the proposed Give all agents a permanent account-wide administrative secret approach.
C:This limitation concerns Rely on a prompt statement that the user is authorized; it does not diagnose the proposed Give all agents a permanent account-wide administrative secret approach.
D:Identity-aware agents should authenticate to tools with appropriate caller scope This explains the recommended design, but it is not the requested diagnosis of Give all agents a permanent account-wide administrative secret.