QuiztudyPREMIUM
🌍 All Study Guides📰 Blog💡 About
AWS Certified AI Practitioner • STUDY MODE

Practice Quiz

QUESTION 1 OF 9

A company wants to develop a generative AI application but must adhere to strict security policies. They require a fully managed service that provides secure, enterprise-grade access to high-performing foundation models. Which AWS service should they choose to meet these requirements?

A
Amazon BedrockCorrect Answer
B
Amazon EC2
C
AWS Lambda
D
Amazon Simple Storage Service (Amazon S3)
Explanation:

Amazon Bedrock is a fully managed service that provides secure, enterprise-grade access to foundation models to help build and scale generative AI applications. This directly matches the requirement for a fully managed service with secure, enterprise-grade access.

QUESTION 2 OF 9

A financial services company is planning to build and scale several generative AI applications. They require a fully managed AWS service that provides secure, enterprise-grade access to high-performing foundation models from leading AI companies. Which AWS service meets these specific requirements?

A
Amazon BedrockCorrect Answer
B
Amazon SageMaker
C
AWS Lambda
D
Amazon Comprehend
Explanation:

According to the Amazon Bedrock overview, Amazon Bedrock is a fully managed service that provides secure, enterprise-grade access to high-performing foundation models from leading AI companies to build and scale generative AI applications.

QUESTION 3 OF 9

A financial institution is implementing a generative AI solution using Amazon Bedrock. During a security review, the risk management team asks for clarification on data protection roles under the AWS shared responsibility model. Which of the following statements accurately describes the division of responsibility for Amazon Bedrock?

A
AWS is responsible for protecting the global infrastructure of Amazon Bedrock, while the customer is responsible for maintaining control over their content and configuring security for the services they use.Correct Answer
B
The customer is responsible for protecting the global infrastructure, while AWS is responsible for maintaining control over the customer's hosted content.
C
AWS is responsible for configuring security for individual services, while the customer is only responsible for physical hardware security.
D
Both AWS and the customer share equal operational responsibility for configuring security inside the third-party model provider's corporate network.
Explanation:

Under the AWS shared responsibility model for Amazon Bedrock, AWS is responsible for protecting the global infrastructure that runs the AWS Cloud, whereas the customer is responsible for maintaining control over their content and managing security configuration for the AWS services they use.

QUESTION 4 OF 9

When working with Amazon Bedrock or other AWS services using the console, API, AWS CLI, or AWS SDKs, what is the recommended security practice regarding the use of tags and free-form text fields like Name fields?

A
Confidential or sensitive information, such as customer email addresses, should not be entered into tags or free-form text fields as this data may be utilized in billing or diagnostic logs.Correct Answer
B
Sensitive customer email addresses should be entered only into tags to guarantee they are automatically encrypted and hidden from all diagnostic logs.
C
Free-form text fields like Name fields should be used to store customer identifiers, as Amazon Bedrock automatically filters them out before billing generation.
D
Customer email addresses must be stored in tags to allow third-party model providers to troubleshoot latency issues during inference.
Explanation:

AWS strongly recommends never placing confidential or sensitive information (such as customer email addresses) into tags or free-form text fields (like Name fields). Any data entered into these fields may be utilized in billing or diagnostic logs.

QUESTION 5 OF 9

A healthcare organization is adopting Amazon Bedrock to run natural language queries against clinical datasets. The compliance team is concerned that the third-party model providers who developed the foundation models might be able to view their clinical prompts, completions, or Amazon Bedrock logs. What architectural mechanism in Amazon Bedrock addresses this compliance concern?

A
Amazon Bedrock operates Model Deployment Accounts owned by the service team where third-party model providers have no access, preventing them from viewing customer prompts, completions, or Amazon Bedrock logs.Correct Answer
B
Amazon Bedrock requires customers to establish a direct VPN connection to the third-party model provider's network so the customer can audit logs on the provider's side.
C
Amazon Bedrock automatically emails diagnostic logs to third-party providers but strips out the prompt text and completions using static masks.
D
Amazon Bedrock sends prompts and completions directly to the provider's account but secures them with standard TLS 1.1 encryption to prevent intercept.
Explanation:

Amazon Bedrock runs deep copies of the model provider's inference and training software in Model Deployment Accounts owned by the AWS service team. Third-party model providers have no access to these accounts, preventing them from seeing any prompts, completions, or logs.

QUESTION 6 OF 9

To secure data in transit when communicating with AWS resources, what are the protocol requirements and recommendations specified by Amazon Bedrock?

A
Amazon Bedrock requires the use of TLS 1.2 and recommends the use of TLS 1.3.Correct Answer
B
Amazon Bedrock requires the use of TLS 1.3 and recommends TLS 1.1 as a secure fallback.
C
Amazon Bedrock requires the use of TLS 1.0 and recommends upgrading to TLS 1.2 only for custom models.
D
Amazon Bedrock requires the use of TLS 1.1 and recommends using unencrypted HTTP when latency is a priority.
Explanation:

Amazon Bedrock strictly requires the use of SSL/TLS to communicate with AWS resources, requiring at least TLS 1.2 and recommending TLS 1.3 for communications.

QUESTION 7 OF 9

A company is planning to deploy a generative AI application on Amazon Bedrock. During their security planning phase, the team is reviewing their duties under the AWS shared responsibility model. Which of the following describes a responsibility of the customer under this model?

A
Protecting the global infrastructure that runs all of the AWS Cloud services.
B
Maintaining control of their hosted content and managing service security configurations.Correct Answer
C
Managing and securing the physical facilities and hardware hosting the foundation models.
D
Directly configuring and securing the third-party model provider's development environments.
Explanation:

Under the AWS shared responsibility model for Amazon Bedrock, AWS protects the global infrastructure that runs the AWS Cloud, while customers are responsible for maintaining control of their hosted content and managing service security configurations.

QUESTION 8 OF 9

An administrator is setting up several resources in Amazon Bedrock using the AWS CLI and plans to organize them by adding resource tags. The administrator wants to include sensitive customer identifiers, such as client email addresses, directly within the free-form Name tag. Why is this practice strongly discouraged according to AWS?

A
Because any data entered into tags or free-form text fields like Name fields may be processed in billing or diagnostic logs.Correct Answer
B
Because Amazon Bedrock requires all tags to be encrypted with a customer managed key prior to creation.
C
Because third-party model providers have direct access to billing and diagnostic logs containing resource tags.
D
Because the AWS CLI automatically rejects any tag values containing sensitive symbols such as '@' for email formats.
Explanation:

AWS strongly recommends against putting confidential or sensitive information (such as customer email addresses) into tags or free-form text fields (like Name fields) because any data entered into these fields may be used in billing or diagnostic logs.

QUESTION 9 OF 9

When establishing secure communications with AWS resources for Amazon Bedrock, which combination of cryptographic and protocol requirements must be met when using the CLI or API?

A
The client must use a FIPS endpoint if FIPS 140-3 validated cryptographic modules are required, and the connection requires TLS 1.2.Correct Answer
B
The client must use TLS 1.1 as the required minimum protocol, with TLS 1.2 being only a recommended option.
C
The client must establish connections exclusively using TLS 1.3, as TLS 1.2 is no longer permitted.
D
The client must request custom model provider keys because FIPS endpoints are only accessible by model providers.
Explanation:

AWS requires a minimum of TLS 1.2 (and recommends TLS 1.3) for SSL/TLS communication with AWS resources. Furthermore, if FIPS 140-3 validated cryptographic modules are required when accessing AWS through a CLI or API, the customer must use a FIPS endpoint.

Ready to test your recall?

A company wants to develop a generative AI application but must adhere to strict security policies. They require a fully managed service that provides secure, enterprise-grade access to high-performing foundation models. Which AWS service should they choose to meet these requirements?

A
Amazon Bedrock
B
Amazon EC2
C
AWS Lambda
D
Amazon Simple Storage Service (Amazon S3)

How confident are you in this answer?