All AWS exams
Free AIP-C01 practice test: 30 questions with answers
30 original questions for AWS Certified Generative AI Developer - Professional, drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.
- Free questions
- 30
- Full bank
- 100 questions
- Real exam
- 75 questions, 180 min
All 30 AIP-C01 questions with answers
The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.
Foundation Model Integration, Data Management, and Compliance (6 questions)
Question 1
A RAG application built on an Amazon Bedrock knowledge base returns outdated policy answers after the team edited documents in an Amazon S3 bucket. Which action makes the updated content searchable?
- AIncrease the number of results the retriever returns from 5 to 25 and raise the minimum relevance score
- BSwitch to a foundation model with a more recent training cutoff date and a larger maximum context window
- CDelete and recreate the foundation model access grant in the Amazon Bedrock console and then re-run the setup
- DStart an ingestion job for the knowledge base data source to re-sync the updated S3 documents
Show answer and explanationHide answer
Correct answer: DKnowledge base content is indexed when an ingestion (sync) job runs, so edits in S3 are not reflected in the vector index until the data source is re-synced. Changing the model or raising the retrieval count does not fix stale indexed content, and model access grants are unrelated to indexing.
Question 2
A developer indexes document chunks with one embedding model and sends user queries through a different embedding model. Retrieval relevance is poor even though the vector index is healthy. What is the most likely root cause?
- AQuery and document vectors come from different embedding spaces, so their distances are not meaningful
- BThe chunks are too large for the vector index to store without exceeding the per-item size limit
- CThe vector index is missing a cross-encoder reranking stage that rescores the top 50 candidates before generation
- DThe vector index uses HNSW graph-based approximate search instead of an exact flat index
Show answer and explanationHide answer
Correct answer: ASimilarity search only works when queries and documents are embedded by the same model, because each model defines its own vector space. Chunk size, reranking, and the index algorithm may affect quality, but mismatched embedding models make the distances meaningless.
Question 3
A team wants answers to be checked against the retrieved source passages and blocked when a response is not supported by them. Which Amazon Bedrock Guardrails capability addresses this?
- AWord filters for profanity list
- BProvisioned Throughput capacity
- CContextual grounding check
- DModel invocation logging to S3
Show answer and explanationHide answer
Correct answer: CContextual grounding checks score a response for grounding in the supplied source text and for relevance to the query, and they can block responses that fall below the thresholds. Word filters match literal terms, while Provisioned Throughput and invocation logging do not evaluate content.
Question 4
Which two actions reduce the chance that a RAG pipeline retrieves irrelevant chunks? (Choose two.)
- AUse a model with a larger output token limit
- BApply metadata filters on attributes such as department and effective date at query time
- CSet the chunk size to the full length of every document
- DCombine keyword and vector scores in a hybrid search
- ELower the generator temperature to zero to reduce retrieval noise
Show answer and explanationHide answer
Correct answer: B, DMetadata filters narrow the candidate set to documents that are valid for the user and the question, and hybrid search improves recall for exact terms such as product codes that pure vector search can miss. Output limits and generator temperature do not affect which chunks are retrieved.
Question 5
Legal contracts are split into fixed-size chunks, and answers often miss clauses that span a chunk boundary. Which chunking change best addresses this?
- AAdd overlap between adjacent chunks so boundary text appears in more than one chunk
- BDisable chunking and index entire PDFs as one vector per file for simplicity
- CReduce the embedding dimensionality from 1024 to 256 with a PCA projection applied to stored vectors
- DIncrease the number of top-k results without changing chunks, raising k from 5 to 50 and adding filters
Show answer and explanationHide answer
Correct answer: AOverlap copies text near each boundary into the neighbouring chunk, so a clause that crosses a split can still be retrieved intact. Indexing whole PDFs usually dilutes the embedding and hurts retrieval precision, and reducing dimensions or raising top-k does not fix the split.
Question 6
A healthcare company stores patient-related documents in Amazon S3 and must discover where personally identifiable information is stored before the documents are used for retrieval. Which AWS service is designed for this?
- AAmazon Macie
- BAmazon Inspector
- CAmazon GuardDuty
- DAWS Config
Show answer and explanationHide answer
Correct answer: AAmazon Macie uses machine learning and pattern matching to discover and classify sensitive data such as PII in S3 buckets. Inspector scans workloads for vulnerabilities, GuardDuty detects threats in activity logs, and AWS Config records resource configuration.
Implementation and Integration (6 questions)
Question 7
A Bedrock agent must look up order status from an existing REST API. Which component connects the agent to that API?
- AKnowledge base data source that is queried with the user's question, returning ranked document passages from an S3 prefix
- BGuardrail with a denied topic filter that blocks outbound calls to external REST systems
- CPrompt template with the full OpenAPI schema pasted into the system prompt so the model can format HTTP requests as plain text
- DAction group whose OpenAPI schema defines the operations, executed by a Lambda function or API integration
Show answer and explanationHide answer
Correct answer: DAn action group describes the callable operations with an OpenAPI schema, and the agent invokes a Lambda function or API integration to perform them. A knowledge base is for retrieval over documents, and prompt text cannot execute an API call.
Question 8
A chat interface must display tokens as the model generates them, through a Bedrock-backed backend. Which Amazon Bedrock runtime operation returns the response incrementally?
- ACreateBatchModelInvocationJobAsync
- BInvokeModelSynchronously
- CRetrieveKnowledgeBaseChunks
- DInvokeModelWithResponseStream
Show answer and explanationHide answer
Correct answer: DInvokeModelWithResponseStream returns the generated output as a stream of chunks, which lets the UI render partial text. InvokeModel returns the complete response at once, batch jobs are asynchronous, and Retrieve only returns knowledge base passages.
Question 9
A document pipeline has several steps: extraction, parallel model calls per section, retries on throttling, and a human approval step before publishing. Which service best orchestrates this workflow?
- AAmazon SNS topic that fans out messages to subscribers through HTTPS, Lambda, and SQS endpoints
- BAWS Step Functions state machine with Retry, Catch, Map, and wait-for-callback tasks
- CAmazon Route 53 health checks that probe endpoint availability and fail over DNS records
- DAmazon SQS standard queue without a coordinator, with a redrive policy to a dead-letter queue for retries
Show answer and explanationHide answer
Correct answer: BStep Functions coordinates multi-step workflows with built-in retries, error handling, parallel Map states, and callback patterns for human approval. SNS and SQS move messages but do not manage workflow state, and Route 53 is DNS.
Question 10
Which two practices make tool use by an AI agent safer and more reliable? (Choose two.)
- AGive the agent an IAM role with administrator access so it never fails
- BValidate tool inputs in the Lambda function before performing any write
- CReturn errors as structured messages the agent can read and act on
- DLet the agent call any internal API by default for flexibility
- ERemove timeouts so long-running tools can finish
Show answer and explanationHide answer
Correct answer: B, CValidating inputs before writes stops malformed or unsafe actions, and structured error messages let the agent recover or ask for help. Broad administrator access and default access to every API widen the blast radius, and removing timeouts can hang the agent.
Question 11
Whenever a new file lands in an Amazon S3 bucket, a summary should be generated and stored, and several independent consumers should react to the result. Which pattern fits best?
- AClient polls an EC2 cron job every hour, listing the bucket for new objects and writing results to a shared folder
- BOperators run a manual batch each Friday through a shell script that copies objects to a local disk
- CS3 event sent to Amazon EventBridge, where a rule invokes a Lambda function that writes results to a store
- DUsers email each document to a shared inbox, which a team member forwards to an analyst who uploads it to the bucket by hand
Show answer and explanationHide answer
Correct answer: CEventBridge routes the S3 event to targets through rules, which decouples producers and consumers and avoids polling. Scheduled or manual batches and polling add latency and operational work.
Question 12
A supervisor agent must delegate billing questions to one specialist agent and shipping questions to another, and combine their answers. Which Amazon Bedrock feature provides this?
- AModel evaluation job comparing two models on a dataset with automatic metrics for summarization
- BMulti-agent collaboration in which a supervisor agent delegates to specialist agents
- CPrompt caching for repeated system prompts to lower input token charges
- DProvisioned Throughput reservation for a single model with a one-month commitment and a number of units
Show answer and explanationHide answer
Correct answer: BMulti-agent collaboration lets a supervisor agent route subtasks to collaborator agents and merge the results. The other options control evaluation, capacity, or cost of a single model call.
AI Safety, Security, and Governance (6 questions)
Question 13
A company wants to stop customer personal data from appearing in prompts sent to a foundation model and in the responses returned to users. Which Amazon Bedrock control addresses this?
- AGuardrail sensitive information filters applied to the model invocation
- BProvisioned Throughput with reserved model units for capacity
- CModel invocation logging to CloudWatch Logs and S3 with request and response bodies
- DBatch inference jobs that read records from an S3 input prefix
Show answer and explanationHide answer
Correct answer: AGuardrail sensitive information filters detect PII in prompts and responses and can block or mask it at invocation time. Invocation logging records traffic but does not filter it, while throughput and batch settings do not inspect content.
Question 14
A web application lets users paste documents that may contain hidden instructions telling the model to ignore its system prompt and reveal internal data. Which mitigation best reduces this prompt injection risk?
- ASeparate untrusted content from instructions, delimit it clearly, restrict tool permissions, and validate outputs
- BPlace all user-supplied content inside the system prompt so the model treats the text as trusted
- CRaise the maximum output tokens to 8192 so the model has room to explain why it declines
- DTrust the model to ignore instructions that appear inside user data, which it separates from directives
Show answer and explanationHide answer
Correct answer: AClear separation of untrusted content, least-privilege tool access, and output validation limit what a successful injection can do. Models cannot be relied on to ignore instructions in their input, and placing user content in the system prompt makes it more trusted, not less.
Question 15
A security team must allow only approved foundation models to be invoked in any account in the organization, enforced centrally. Which approach is most appropriate?
- AA service control policy that limits bedrock:InvokeModel to the approved model ARNs
- BLower the model temperature in each application's inference settings
- CRecord the approved models in a README in the source repository and in the team wiki, reviewed quarterly
- DTag each model resource with a cost-center and owner tag for chargeback
Show answer and explanationHide answer
Correct answer: AAn AWS Organizations service control policy sets a permission ceiling across accounts, so only approved model ARNs can be invoked. Temperature, documentation, and tags do not restrict access.
Question 16
Which two controls help meet responsible AI goals for a customer-facing generative AI application? (Choose two.)
- AHide the fact that AI is used so users are not confused
- BRun bias and toxicity evaluations on representative prompts before launch
- CShip without monitoring to reduce operational noise
- DTell users that an AI generated the answer and provide a path to a human agent
- ERemove user feedback channels to keep the interface simple
Show answer and explanationHide answer
Correct answer: B, DPre-launch evaluation on representative inputs surfaces harmful or biased behaviour, and clear AI disclosure with a human escalation path supports transparency and recourse. Hiding AI use, skipping monitoring, and removing feedback each weaken oversight.
Question 17
A team must delete stored user conversation logs automatically 30 days after they are created. Which Amazon S3 feature meets this requirement with the least operational effort?
- AS3 versioning on the bucket keeps previous object versions
- BAn S3 lifecycle rule that expires objects 30 days after creation
- CS3 Object Lock in compliance mode with a 365-day retention
- DA lifecycle transition to Glacier Deep Archive at 30 days
Show answer and explanationHide answer
Correct answer: BA lifecycle expiration rule deletes objects automatically after the configured age. Versioning keeps old copies, Object Lock prevents deletion for its retention period, and transitioning to archive storage keeps the data instead of removing it.
Question 18
A legal information assistant sometimes produces answers that look authoritative but are wrong. Which governance step is most appropriate for high-risk answers?
- AHuman review workflow for high-risk answers, with disclaimers and grounding checks
- BPublish every answer automatically to the end-user interface without review to reduce latency
- CRemove citations and source attributions from responses to simplify the interface for end users
- DIncrease temperature so the answers sound more creative and natural
Show answer and explanationHide answer
Correct answer: AHigh-risk outputs should pass through human review, carry clear disclaimers, and be checked against sources where possible. Automatic publishing, removing citations, and higher temperature each increase the risk of confident errors.
Operational Efficiency and Optimization for GenAI Applications (6 questions)
Question 19
A support chatbot sends every request to the largest model, although most questions are simple FAQs. Which optimization reduces cost while keeping quality for complex questions?
- ARoute simple FAQs to a smaller model and reserve the largest model for complex requests
- BRaise the maximum output tokens for every request so answers are not cut short
- CRemove prompt caching because it adds complexity and operational overhead
- DUse the largest model for every request to keep answers consistent across users
Show answer and explanationHide answer
Correct answer: AModel routing sends easy requests to a cheaper model and keeps the expensive model for hard cases, which lowers average cost. Larger outputs and removing caching increase cost, and consistency does not require the largest model everywhere.
Question 20
A long system prompt and reference document are sent unchanged with every request to the same model. Which Amazon Bedrock feature reduces input cost and latency for the repeated prefix?
- ABatch inference for offline jobs
- BKnowledge base incremental data sync
- CPrompt caching for the repeated prefix
- DGuardrails for prompt filtering
Show answer and explanationHide answer
Correct answer: CPrompt caching stores the processed prefix of a prompt so repeated requests reuse it, reducing cost and time on supported models. Batch inference handles offline jobs, Guardrails filter content, and knowledge base sync updates the index.
Question 21
A production application has a steady, high-volume workload and needs predictable latency and guaranteed model capacity. Which Bedrock option is most appropriate?
- AOn-demand inference with no quota increase
- BSpot Instances for inference
- CBatch inference
- DProvisioned Throughput
Show answer and explanationHide answer
Correct answer: DProvisioned Throughput reserves model capacity for consistent latency and throughput, which suits steady production traffic. On-demand capacity can be throttled under load, and batch inference is asynchronous rather than real-time.
Question 22
Which two actions reduce token usage in a RAG application without giving up answer quality? (Choose two.)
- ARetrieve fewer, more relevant chunks and rerank them before generation
- BInclude the entire knowledge base in every prompt
- CAsk for long, unrestricted answers
- DUse a concise system prompt and set a maximum output token limit
- ERepeat the user's question twice in the prompt
Show answer and explanationHide answer
Correct answer: A, DSending fewer but more relevant chunks cuts input tokens while keeping the evidence, and concise instructions with an output limit cap token use. Sending the whole knowledge base or long answers and repeating text all increase tokens without improving the answer.
Question 23
A team wants to track model latency, token usage, and throttling for a Bedrock application in one place with alerts. Which AWS service should it use?
- AAmazon Macie for sensitive data discovery in S3 buckets
- BAmazon CloudWatch metrics, dashboards, and alarms for Bedrock
- CAmazon Athena SQL queries over CUR data and S3 server access logs
- DAWS Backup vault plans for scheduled copies of data sources and tables
Show answer and explanationHide answer
Correct answer: BCloudWatch publishes Bedrock runtime metrics such as invocation latency, token counts, and throttles, and supports dashboards and alarms. Macie finds sensitive data, Athena queries stored data, and Backup protects data copies.
Question 24
A self-hosted model runs on a SageMaker real-time endpoint whose traffic varies widely through the day. Which configuration keeps cost matched to demand?
- AManual scaling by an operator each morning and evening
- BA fixed fleet of instances sized for peak traffic
- CTarget-tracking autoscaling based on invocations per instance
- DDisabling endpoint health checks to free instance capacity
Show answer and explanationHide answer
Correct answer: CTarget-tracking autoscaling adds and removes instances based on a utilization metric, keeping cost close to demand while meeting latency targets. Fixed fleets pay for idle peak capacity, and manual scaling responds too slowly.
Testing, Validation, and Troubleshooting (6 questions)
Question 25
A team changes a prompt in its RAG application and needs to detect quality regressions before release. Which practice is most appropriate?
- ARely on the model's self-reported confidence score attached to each answer, which the pipeline logs for each build
- BAsk one developer to try a single question on a local branch and confirm the answer looks fine to them
- CShip the change to production and wait for user complaints to surface through support tickets
- DRun an automated evaluation on a golden question set and compare faithfulness and relevance with the previous baseline
Show answer and explanationHide answer
Correct answer: DA golden dataset with automated metrics gives repeatable comparisons against a baseline, which makes regressions visible before release. Single spot checks, waiting for complaints, and self-reported confidence are not reliable signals.
Question 26
Which two aspects should an evaluation of a summarization model include? (Choose two.)
- ANumber of GPUs in the training cluster
- BFaithfulness to the source document
- CModel release date
- DCoverage of the key points in the source
Show answer and explanationHide answer
Correct answer: B, DFaithfulness checks that the summary does not add unsupported claims, and coverage checks that important points are retained. Training hardware and release date say nothing about the quality of a specific output.
Question 27
An agent sometimes calls the wrong action group. Which step should a developer take first?
- AIncrease the Lambda timeout to 15 minutes and raise the memory allocation to 3008 MB so the action group finishes
- BReduce the knowledge base chunk size to 50 tokens with 20 percent overlap and re-index the full corpus
- CDisable the agent in production until the next release window is planned
- DReview agent traces for the failing sessions and refine action group descriptions and schemas
Show answer and explanationHide answer
Correct answer: DAgent traces show which action was chosen and why, so the team can fix unclear descriptions or schemas at the source. Timeouts, disabling the agent, and chunk size do not address action selection.
Question 28
A team compares two candidate models for a support-ticket summarization task. Which evaluation method is most reliable?
- AUse a public leaderboard score from a published benchmark as the sole ranking basis
- BScore both models on a labeled sample of real tickets using a rubric, then confirm with human reviewers
- CCompare parameter counts and pick the larger model, assuming more parameters yield better accuracy
- DChoose whichever model returns longer answers, since verbose responses usually look more thorough to reviewers
Show answer and explanationHide answer
Correct answer: BA labelled sample of real tickets with a rubric measures quality on the actual task, and human confirmation checks the automated grading. Leaderboards, parameter counts, and answer length do not measure how well a model performs this task.
Question 29
Retrieval latency in a RAG application has risen sharply. Which investigation should come first?
- ACheck the vector index configuration and top-k value, and measure latency for each pipeline stage
- BRename the S3 bucket that holds the source documents and change its default storage class to Glacier Instant
- CIncrease the browser cache lifetime for static assets and set Cache-Control max-age on the frontend bundle to one year
- DUpgrade the frontend framework version to the latest major release and migrate the bundler and component libraries
Show answer and explanationHide answer
Correct answer: APer-stage timing shows whether the delay is in embedding, retrieval, reranking, or generation, and index settings such as top-k directly affect search cost. The frontend, bucket name, and browser cache are unrelated to retrieval latency.
Question 30
A regression evaluation shows higher hallucination rates after a model upgrade. Which step is most appropriate?
- AIgnore the result because the new model is larger and generally more capable, so the drop is likely noise
- BDisable the faithfulness metrics in the pipeline so the release can proceed on schedule without human review
- CRoll back or hold the upgrade, rerun the evaluation suite, and investigate the failing cases
- DDeploy the upgrade to the production fleet anyway and monitor user complaints through the support queue
Show answer and explanationHide answer
Correct answer: CA measured quality regression should block promotion until the cause is understood, so the team holds or reverts the change and examines failing cases. Ignoring or hiding the metric and shipping regardless bypass the control the evaluation exists to provide.
Want more AIP-C01 questions?
The full bank has 100 questions with answers and explanations, as a PDF, an online practice exam, or both.
Both formats together. The best value.
Instant access after payment, with 90 days of updates. Checkout is on our store, AIExamCerts.