AWS Certified AI Practitioner AIF-C01 Practice Test 47
Question 460
An internal service must invoke supported AWS endpoints without traversing the public internet path. Before approving a rollout, an architect suggests Move the API key into a prompt and call a public endpoint. Which mismatch should be documented for this precise design?
- Private connectivity can keep service traffic on AWS networking paths
- Public endpoints do not inherently supply the intended private network boundary
- Sampling settings do not change network connectivity
- Embedding credentials does not establish private connectivity
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Move the API key into a prompt and call a public endpoint. Embedding credentials does not establish private connectivity
Incorrect Answers
A:Private connectivity can keep service traffic on AWS networking paths This explains the recommended design, but it is not the requested diagnosis of Move the API key into a prompt and call a public endpoint.
B:This limitation concerns Assume a public S3 URL is equivalent to a VPC endpoint; it does not diagnose the proposed Move the API key into a prompt and call a public endpoint approach.
C:This limitation concerns Use model temperature as a routing control; it does not diagnose the proposed Move the API key into a prompt and call a public endpoint approach.
Question 461
A security team wants to discover possible personally identifiable information in an S3 corpus for an AI project. During a design review, someone proposes Use IAM roles alone as a sensitive-data classifier. Which technical objection is specifically relevant to this proposal?
- Access policy limits access but does not analyze content for PII
- Speech synthesis is not stored-object sensitive-data scanning
- API request counts do not identify PII within stored objects
- Macie can find sensitive data patterns in S3 and produce findings
Explanation
Correct Answer
A:This is the actual failure mode of the proposed approach: Use IAM roles alone as a sensitive-data classifier. Access policy limits access but does not analyze content for PII
Incorrect Answers
B:This limitation concerns Use Amazon Polly voice generation to find customer PII; it does not diagnose the proposed Use IAM roles alone as a sensitive-data classifier approach.
C:This limitation concerns Use a CloudTrail event count as a list of exposed personal fields; it does not diagnose the proposed Use IAM roles alone as a sensitive-data classifier approach.
D:Macie can find sensitive data patterns in S3 and produce findings This explains the recommended design, but it is not the requested diagnosis of Use IAM roles alone as a sensitive-data classifier.
Question 462
A regulated assistant must show where each policy answer originated. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A system inventory lists this competing approach as active: Strip source identifiers to make prompts shorter
- A reviewed design record approves this competing approach: Use a service uptime metric as proof every fact has a source
- A component test invokes this alternate approach successfully: Use only the model's confidence as source documentation
- A reviewer follows a response citation to the exact source document version
Explanation
Correct Answer
D:A reviewer follows a response citation to the exact source document version. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Removing provenance weakens answer verification An active setting cannot independently prove the requested business outcome.
B:Availability does not establish informational origins Design approval is not evidence that the alternative meets the actual requirement.
C:Confidence does not identify the underlying document A component invocation does not validate the necessary end-to-end outcome.
Question 463
A governance team must detect prohibited changes in AWS resource settings associated with AI workloads. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A system inventory lists this competing approach as active: Use a generative prompt to monitor every actual AWS configuration change
- A reviewed design record approves this competing approach: Use Amazon Polly audio logs as the AWS compliance source
- A rule detects a deliberately noncompliant test configuration and records the finding
- A component test invokes this alternate approach successfully: Use only model embeddings to decide security group configuration compliance
Explanation
Correct Answer
C:A rule detects a deliberately noncompliant test configuration and records the finding. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Prompt text cannot observe resource state without integrations An active setting cannot independently prove the requested business outcome.
B:Speech synthesis is unrelated to resource-configuration recording Design approval is not evidence that the alternative meets the actual requirement.
D:Semantic vectors are not a resource-configuration history A component invocation does not validate the necessary end-to-end outcome.
Question 464
A business agent should call external APIs on behalf of users without sharing one permanent master credential. During a design review, someone proposes Rely on a prompt statement that the user is authorized. Which technical objection is specifically relevant to this proposal?
- Plain language is not a cryptographically verified identity
- Semantic relevance does not establish the caller's authority
- Identity-aware agents should authenticate to tools with appropriate caller scope
- Shared high-privilege credentials create excessive blast radius
Explanation
Correct Answer
A:This is the actual failure mode of the proposed approach: Rely on a prompt statement that the user is authorized. Plain language is not a cryptographically verified identity
Incorrect Answers
B:This limitation concerns Use vector similarity as proof of permission to invoke an API; it does not diagnose the proposed Rely on a prompt statement that the user is authorized approach.
C:Identity-aware agents should authenticate to tools with appropriate caller scope This explains the recommended design, but it is not the requested diagnosis of Rely on a prompt statement that the user is authorized.
D:This limitation concerns Give all agents a permanent account-wide administrative secret; it does not diagnose the proposed Rely on a prompt statement that the user is authorized approach.
Question 465
A governance team must detect prohibited changes in AWS resource settings associated with AI workloads. Which option BEST meets the business requirement?
- Use only model embeddings to decide security group configuration compliance
- Use a generative prompt to monitor every actual AWS configuration change
- Use Amazon Polly audio logs as the AWS compliance source
- Use AWS Config to evaluate supported resource configuration rules
Explanation
Correct Answer
D:Config tracks resource configuration and compliance against configured rules The specified scenario makes this the most appropriate approach.
Incorrect Answers
A:Semantic vectors are not a resource-configuration history This prevents the approach from meeting the stated requirement.
B:Prompt text cannot observe resource state without integrations This prevents the approach from meeting the stated requirement.
C:Speech synthesis is unrelated to resource-configuration recording This prevents the approach from meeting the stated requirement.
Question 466
An untrusted retrieved web page tells an agent to ignore permissions and export customer records. Before approving a rollout, an architect suggests Assume content filters alone grant safe access to payment APIs. Which mismatch should be documented for this precise design?
- Removing logs prevents investigation and does not stop injection
- Prompt injection in lower-trust context must not override tool permissions
- External content can be adversarial and is not an authorized operator
- Output filtering cannot replace least-privilege tool permissions
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Assume content filters alone grant safe access to payment APIs. Output filtering cannot replace least-privilege tool permissions
Incorrect Answers
A:This limitation concerns Disable all tool audit logs to reduce warning noise; it does not diagnose the proposed Assume content filters alone grant safe access to payment APIs approach.
B:Prompt injection in lower-trust context must not override tool permissions This explains the recommended design, but it is not the requested diagnosis of Assume content filters alone grant safe access to payment APIs.
C:This limitation concerns Obey any instruction found in a retrieved document; it does not diagnose the proposed Assume content filters alone grant safe access to payment APIs approach.
Question 467
A procurement team asks for AWS third-party compliance reports and agreements. Before approving a rollout, an architect suggests Assume a customer-authored model card constitutes AWS SOC evidence. Which mismatch should be documented for this precise design?
- Config focuses on resource configuration, not compliance report distribution
- Artifact provides access to AWS compliance reports and agreements
- Account activity logs do not replace provider audit reports
- Model documentation is not AWS provider certification evidence
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Assume a customer-authored model card constitutes AWS SOC evidence. Model documentation is not AWS provider certification evidence
Incorrect Answers
A:This limitation concerns Use AWS Config as the repository for signed AWS third-party audits; it does not diagnose the proposed Assume a customer-authored model card constitutes AWS SOC evidence approach.
B:Artifact provides access to AWS compliance reports and agreements This explains the recommended design, but it is not the requested diagnosis of Assume a customer-authored model card constitutes AWS SOC evidence.
C:This limitation concerns Use CloudTrail events as an external auditor's signed report; it does not diagnose the proposed Assume a customer-authored model card constitutes AWS SOC evidence approach.
Question 468
A customer uses a managed AI service and wants clarity on who manages data access permissions. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- An access review confirms customer IAM and AWS service boundaries are assigned
- A component test invokes this alternate approach successfully: Assume customers maintain AWS physical data center security
- A reviewed design record approves this competing approach: Treat shared responsibility as a contract removing all customer duties
- A system inventory lists this competing approach as active: Assume AWS automatically grants only business-appropriate permissions
Explanation
Correct Answer
A:An access review confirms customer IAM and AWS service boundaries are assigned. This checks the business result rather than just a configured feature.
Incorrect Answers
B:AWS is responsible for security of its underlying infrastructure A component invocation does not validate the necessary end-to-end outcome.
C:Managed services do not eliminate customer-side security obligations Design approval is not evidence that the alternative meets the actual requirement.
D:Customers must set and review their own IAM and data scope An active setting cannot independently prove the requested business outcome.
Question 469
An untrusted retrieved web page tells an agent to ignore permissions and export customer records. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A reviewed design record approves this competing approach: Assume content filters alone grant safe access to payment APIs
- A component test invokes this alternate approach successfully: Disable all tool audit logs to reduce warning noise
- Adversarial retrieval tests cannot trigger unauthorized exports
- A system inventory lists this competing approach as active: Obey any instruction found in a retrieved document
Explanation
Correct Answer
C:Adversarial retrieval tests cannot trigger unauthorized exports. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Output filtering cannot replace least-privilege tool permissions Design approval is not evidence that the alternative meets the actual requirement.
B:Removing logs prevents investigation and does not stop injection A component invocation does not validate the necessary end-to-end outcome.
D:External content can be adversarial and is not an authorized operator An active setting cannot independently prove the requested business outcome.
Question 470
An inference application should only invoke its designated Bedrock model and read an approved S3 prefix. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- Denied calls to unapproved models and prefixes appear in access tests
- A system inventory lists this competing approach as active: Grant administrator privileges to every inference role
- A reviewed design record approves this competing approach: Use a public S3 bucket as the security boundary
- A component test invokes this alternate approach successfully: Put an access policy only in the chatbot system prompt
Explanation
Correct Answer
A:Denied calls to unapproved models and prefixes appear in access tests. This checks the business result rather than just a configured feature.
Incorrect Answers
B:Broad permissions expose unrelated resources An active setting cannot independently prove the requested business outcome.
C:Public access is incompatible with restricted source data Design approval is not evidence that the alternative meets the actual requirement.
D:Prompt words cannot enforce AWS API authorization A component invocation does not validate the necessary end-to-end outcome.