AWS Certified AI Practitioner AIF-C01 Practice Test 50
Question 490
An AI chat app exchanges sensitive requests with a backend over a public network. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A component test invokes this alternate approach successfully: Use only at-rest encryption and send plaintext HTTP
- A reviewed design record approves this competing approach: Treat a model safety prompt as transport confidentiality
- A system inventory lists this competing approach as active: Rely on S3 bucket versioning as the network encryption
- Network tests confirm encrypted connections and no plaintext endpoints
Explanation
Correct Answer
D:Network tests confirm encrypted connections and no plaintext endpoints. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Stored-data encryption does not cover unencrypted transit A component invocation does not validate the necessary end-to-end outcome.
B:Instructions to a model cannot encrypt network packets Design approval is not evidence that the alternative meets the actual requirement.
C:Versioning protects object history rather than network sessions An active setting cannot independently prove the requested business outcome.
Question 491
A regulated assistant must show where each policy answer originated. Which option BEST meets the business requirement?
- Maintain provenance, source citations and versioned knowledge records
- Use only the model's confidence as source documentation
- Use a service uptime metric as proof every fact has a source
- Strip source identifiers to make prompts shorter
Explanation
Correct Answer
A:Data lineage supports audits and tracing unsupported outputs The specified scenario makes this the most appropriate approach.
Incorrect Answers
B:Confidence does not identify the underlying document This prevents the approach from meeting the stated requirement.
C:Availability does not establish informational origins This prevents the approach from meeting the stated requirement.
D:Removing provenance weakens answer verification This prevents the approach from meeting the stated requirement.
Question 492
An internal service must invoke supported AWS endpoints without traversing the public internet path. A pilot uses this approach instead: Assume a public S3 URL is equivalent to a VPC endpoint. Which limitation MOST DIRECTLY explains why the requirement is not met?
- Sampling settings do not change network connectivity
- Public endpoints do not inherently supply the intended private network boundary
- Embedding credentials does not establish private connectivity
- Private connectivity can keep service traffic on AWS networking paths
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Assume a public S3 URL is equivalent to a VPC endpoint. Public endpoints do not inherently supply the intended private network boundary
Incorrect Answers
A:This limitation concerns Use model temperature as a routing control; it does not diagnose the proposed Assume a public S3 URL is equivalent to a VPC endpoint approach.
C:This limitation concerns Move the API key into a prompt and call a public endpoint; it does not diagnose the proposed Assume a public S3 URL is equivalent to a VPC endpoint approach.
D:Private connectivity can keep service traffic on AWS networking paths This explains the recommended design, but it is not the requested diagnosis of Assume a public S3 URL is equivalent to a VPC endpoint.
Question 493
A business agent should call external APIs on behalf of users without sharing one permanent master credential. Which option BEST meets the business requirement?
- Give all agents a permanent account-wide administrative secret
- Rely on a prompt statement that the user is authorized
- Use vector similarity as proof of permission to invoke an API
- Use scoped AgentCore Identity or supported workload identity and policy controls
Explanation
Correct Answer
D:Identity-aware agents should authenticate to tools with appropriate caller scope The specified scenario makes this the most appropriate approach.
Incorrect Answers
A:Shared high-privilege credentials create excessive blast radius This prevents the approach from meeting the stated requirement.
B:Plain language is not a cryptographically verified identity This prevents the approach from meeting the stated requirement.
C:Semantic relevance does not establish the caller's authority This prevents the approach from meeting the stated requirement.
Question 494
An auditor needs to know which principal invoked a production AI administration API and when. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A reviewed design record approves this competing approach: Store an unverified spreadsheet of claimed actions
- An authenticated audit event shows the actor, operation and time
- A component test invokes this alternate approach successfully: Use only a model's benchmark score as the actor log
- A system inventory lists this competing approach as active: Use model generated prose as the authoritative account activity log
Explanation
Correct Answer
B:An authenticated audit event shows the actor, operation and time. This checks the business result rather than just a configured feature.
Incorrect Answers
A:An editable assertion is not provider-recorded API history Design approval is not evidence that the alternative meets the actual requirement.
C:Quality scores do not identify callers or timestamps A component invocation does not validate the necessary end-to-end outcome.
D:Model responses do not prove actual service API events An active setting cannot independently prove the requested business outcome.
Question 495
An organization must honor regional data residency and retention rules for AI interaction logs. During a design review, someone proposes Keep every prompt and response forever by default. Which technical objection is specifically relevant to this proposal?
- Encryption does not change legal location or deletion obligations
- Indefinite retention may conflict with minimization policies
- Governance requires knowing where data is stored and when it is removed
- Token limits do not choose storage regions
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Keep every prompt and response forever by default. Indefinite retention may conflict with minimization policies
Incorrect Answers
A:This limitation concerns Assume encryption makes retention and residency irrelevant; it does not diagnose the proposed Keep every prompt and response forever by default approach.
C:Governance requires knowing where data is stored and when it is removed This explains the recommended design, but it is not the requested diagnosis of Keep every prompt and response forever by default.
D:This limitation concerns Use model output length as a data residency setting; it does not diagnose the proposed Keep every prompt and response forever by default approach.
Question 496
An inference application should only invoke its designated Bedrock model and read an approved S3 prefix. Before approving a rollout, an architect suggests Use a public S3 bucket as the security boundary. Which mismatch should be documented for this precise design?
- Broad permissions expose unrelated resources
- Public access is incompatible with restricted source data
- Prompt words cannot enforce AWS API authorization
- Least privilege limits unintended model and data access
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Use a public S3 bucket as the security boundary. Public access is incompatible with restricted source data
Incorrect Answers
A:This limitation concerns Grant administrator privileges to every inference role; it does not diagnose the proposed Use a public S3 bucket as the security boundary approach.
C:This limitation concerns Put an access policy only in the chatbot system prompt; it does not diagnose the proposed Use a public S3 bucket as the security boundary approach.
D:Least privilege limits unintended model and data access This explains the recommended design, but it is not the requested diagnosis of Use a public S3 bucket as the security boundary.
Question 497
A customer uses a managed AI service and wants clarity on who manages data access permissions. Before approving a rollout, an architect suggests Treat shared responsibility as a contract removing all customer duties. Which mismatch should be documented for this precise design?
- Customer configuration responsibility remains even on managed services
- Managed services do not eliminate customer-side security obligations
- AWS is responsible for security of its underlying infrastructure
- Customers must set and review their own IAM and data scope
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Treat shared responsibility as a contract removing all customer duties. Managed services do not eliminate customer-side security obligations
Incorrect Answers
A:Customer configuration responsibility remains even on managed services This explains the recommended design, but it is not the requested diagnosis of Treat shared responsibility as a contract removing all customer duties.
C:This limitation concerns Assume customers maintain AWS physical data center security; it does not diagnose the proposed Treat shared responsibility as a contract removing all customer duties approach.
D:This limitation concerns Assume AWS automatically grants only business-appropriate permissions; it does not diagnose the proposed Treat shared responsibility as a contract removing all customer duties approach.
Question 498
A customer uses a managed AI service and wants clarity on who manages data access permissions. During a design review, someone proposes Assume customers maintain AWS physical data center security. Which technical objection is specifically relevant to this proposal?
- Managed services do not eliminate customer-side security obligations
- Customer configuration responsibility remains even on managed services
- AWS is responsible for security of its underlying infrastructure
- Customers must set and review their own IAM and data scope
Explanation
Correct Answer
C:This is the actual failure mode of the proposed approach: Assume customers maintain AWS physical data center security. AWS is responsible for security of its underlying infrastructure
Incorrect Answers
A:This limitation concerns Treat shared responsibility as a contract removing all customer duties; it does not diagnose the proposed Assume customers maintain AWS physical data center security approach.
B:Customer configuration responsibility remains even on managed services This explains the recommended design, but it is not the requested diagnosis of Assume customers maintain AWS physical data center security.
D:This limitation concerns Assume AWS automatically grants only business-appropriate permissions; it does not diagnose the proposed Assume customers maintain AWS physical data center security approach.
Question 499
An internal service must invoke supported AWS endpoints without traversing the public internet path. During a design review, someone proposes Use model temperature as a routing control. Which technical objection is specifically relevant to this proposal?
- Sampling settings do not change network connectivity
- Embedding credentials does not establish private connectivity
- Private connectivity can keep service traffic on AWS networking paths
- Public endpoints do not inherently supply the intended private network boundary
Explanation
Correct Answer
A:This is the actual failure mode of the proposed approach: Use model temperature as a routing control. Sampling settings do not change network connectivity
Incorrect Answers
B:This limitation concerns Move the API key into a prompt and call a public endpoint; it does not diagnose the proposed Use model temperature as a routing control approach.
C:Private connectivity can keep service traffic on AWS networking paths This explains the recommended design, but it is not the requested diagnosis of Use model temperature as a routing control.
D:This limitation concerns Assume a public S3 URL is equivalent to a VPC endpoint; it does not diagnose the proposed Use model temperature as a routing control approach.
Question 500
An auditor needs to know which principal invoked a production AI administration API and when. Which option BEST meets the business requirement?
- Use AWS CloudTrail event logging for the relevant API activity
- Use only a model's benchmark score as the actor log
- Store an unverified spreadsheet of claimed actions
- Use model generated prose as the authoritative account activity log
Explanation
Correct Answer
A:CloudTrail records AWS account API activity for security audits The specified scenario makes this the most appropriate approach.
Incorrect Answers
B:Quality scores do not identify callers or timestamps This prevents the approach from meeting the stated requirement.
C:An editable assertion is not provider-recorded API history This prevents the approach from meeting the stated requirement.
D:Model responses do not prove actual service API events This prevents the approach from meeting the stated requirement.