AIF-C01 Amazon Web Services AWS Certified AI Practitioner Exam Free Practice Exam Questions (2026 Updated)

The verified answer is D. AWS Artifact. The company needs compliance documentation for submission to regulatory authorities. AWS Artifact is the AWS service designed for this exact requirement. AWS describes AWS Artifact as a self-service portal that provides on-demand access to AWS security and compliance reports and agreements. AWS also states that customers can use AWS Artifact to access AWS and independent software vendor security and compliance reports, download compliance reports, and manage compliance agreements. This directly matches the need to obtain documentation for auditors or regulators.

AWS compliance guidance also explains that AWS supports many security standards and compliance certifications, and AWS reports such as SOC reports help customers and auditors understand AWS controls established to support operations and compliance. AWS Artifact is the mechanism customers use to retrieve many of these compliance documents. Therefore, if the company is using Amazon Bedrock and needs compliance documentation related to AWS services, AWS Artifact is the appropriate service.

AWS Config is incorrect because it records, evaluates, and audits AWS resource configurations. It can help assess whether resources comply with internal rules, but it is not the service for obtaining AWS compliance reports for submission to regulators. Amazon Bedrock is incorrect because Bedrock is the generative AI service being used to process invoices; it does not serve as the compliance report portal. Amazon SageMaker AI is incorrect because SageMaker AI is used to build, train, deploy, and manage machine learning models. It is not the AWS service for downloading AWS compliance documentation.

The question is not asking how to process invoices securely or how to configure Bedrock controls. It is asking where to obtain formal compliance documentation. The correct AWS service is AWS Artifact.

Amazon Comprehend Medical is designed for processing medical records and extracting key clinical entities, useful for summaries. Per the AWS Comprehend Medical documentation:

“Amazon Comprehend Medical enables extraction of relevant medical information from unstructured clinical text such as medications, conditions, and relationships, making it ideal for summarization tasks.”

Comprehensive and Detailed Explanation (AWS AI documents):

AWS machine learning fundamentals classify K-means as an unsupervised learning algorithm used to group unlabeled data into clusters based on feature similarity and distance metrics. Because the data is unlabeled and the goal is grouping rather than prediction, K-means is the most appropriate choice.

Why the other options are incorrect:

XGBoost is a supervised learning algorithm that requires labeled data.

DeepAR forecasting is designed for time series forecasting.

Linear learner is typically used for supervised regression or classification tasks.

AWS AI Study Guide References:

AWS unsupervised learning concepts

AWS clustering algorithms overview

The correct answer is C – Develop an anomaly detection system. According to AWS documentation, anomaly detection models are specifically used to identify unusual or suspicious patterns in data, such as unexpected IP access behavior, unusual network traffic, login anomalies, or deviations from normal usage patterns. Amazon SageMaker and Amazon Lookout for Metrics both support anomaly detection capabilities that detect deviations from learned baselines. AWS highlights that anomaly detection is widely used in cybersecurity, fraud detection, intrusion monitoring, and identifying suspicious IP addresses. Speech recognition (A) and NLP named entity recognition (B) do not classify threat behavior. Fraud forecasting (D) focuses on long-term prediction patterns, not real-time anomaly detection. Since identifying malicious IP sources requires spotting activity outside the normal distribution, anomaly detection is the most accurate and AWS-aligned solution.

Referenced AWS Documentation:

AWS Machine Learning Specialty Guide – Anomaly Detection Use Cases

Amazon SageMaker Documentation – Random Cut Forest (RCF) for Anomaly Detection

Precision is the metric that measures the proportion of true positives (actual frauds) among all flagged positives (flagged frauds). High precision ensures that most of the flagged cases are truly fraudulent, minimizing the number of false positives employees must review.

C is correct:

" Precision is the ratio of true positives to all predicted positives, and it answers: ‘Of all the cases flagged as fraud, how many were actually fraud?’ High precision means fewer non-fraudulent cases are sent for manual review. "

(Reference: AWS ML Concepts – Precision and Recall, AWS Certified AI Practitioner Study Guide)

A (Recall) measures how many actual frauds are caught, but does not minimize false positives.

B (Accuracy) can be misleading in imbalanced datasets (like fraud detection).

The context window determines how much information can fit into a single prompt when using a large language model (LLM) like those on Amazon Bedrock.

Context Window:

The context window is the maximum amount of text (measured in tokens) that a language model can process in a single pass.

For LLM applications, the size of the context window limits how much input data, such as text for sentiment analysis, can be fed into the model at once.

Why Option B is Correct:

Determines Prompt Size: The context window size directly informs how much information (e.g., words or sentences) can fit in one prompt.

Model Capacity: The larger the context window, the more information the model can consider for generating outputs.

Why Other Options are Incorrect:

A. Temperature: Controls randomness in model outputs but does not affect the prompt size.

C. Batch size: Refers to the number of training samples processed in one iteration, not the amount of information in a prompt.

D. Model size: Refers to the number of parameters in the model, not the input size for a single prompt.

AWS Artifact provides compliance reports and certifications (ISO, SOC, GDPR-related documentation) to prove regulatory adherence.

AWS PrivateLink provides private connectivity between VPCs, AWS services, and on-premises networks, ensuring traffic does not traverse the public internet.

A is correct:

" AWS PrivateLink provides private connectivity to services across VPCs, keeping API traffic off the public internet. "

(Reference: AWS PrivateLink Overview)

B (Amazon Q) is a generative AI assistant, not a network security/control tool.

C (CloudFront) is a CDN, not for private API calls.

D (CloudTrail) is for logging and monitoring, not secure connectivity.

Decision trees are an interpretable machine learning algorithm that clearly documents the decision-making process by showing how each input feature affects the output. This transparency is particularly useful when explaining how the model arrives at a certain decision, making it suitable for classifying genes into categories.

Option A (Correct): " Decision trees " : This is the correct answer because decision trees provide a clear and interpretable representation of how input features influence the model ' s output, making it ideal for understanding the inner mechanisms affecting predictions.

Option B: " Linear regression " is incorrect because it is used for regression tasks, not classification.

Option C: " Logistic regression " is incorrect as it does not provide the same level of interpretability in documenting decision-making processes.

Option D: " Neural networks " is incorrect because they are often considered " black boxes " and do not easily explain how they arrive at their outputs.

AWS AI Practitioner References:

Interpretable Machine Learning Models on AWS: AWS supports using interpretable models, such as decision trees, for tasks that require clear documentation of how input data affects output decisions.

Amazon SageMaker JumpStart is the correct service for quickly deploying and consuming a foundation model (FM) within a team ' s VPC.

Amazon SageMaker JumpStart:

Provides access to a wide range of pre-trained models and solutions that can be easily deployed and consumed within a VPC.

Designed to simplify and accelerate the deployment of machine learning models, including foundation models.

Why Option B is Correct:

Rapid Deployment: JumpStart allows for quick deployment of models with minimal configuration, directly within a secure VPC environment.

Ease of Use: Provides a user-friendly interface to select and deploy models, reducing the time to value.

Why Other Options are Incorrect:

A. Amazon Personalize: Focuses on creating personalized recommendations, not deploying foundation models.

C. PartyRock: Not a recognized AWS service.

D. Amazon SageMaker endpoints: Endpoints are for deploying specific models, not a feature for quickly starting with pre-trained foundation models.

The correct answer is D – Purchase Provisioned Throughput on Amazon Bedrock, which provides guaranteed and predictable model capacity for workloads with consistent or steady request volume. According to AWS Bedrock documentation, Provisioned Throughput is specifically designed for production applications that require reliable, consistent inference performance at a controlled cost. It allows customers to reserve a fixed number of model inference units (MIUs), ensuring low latency and cost savings compared to on-demand pricing when traffic is steady. On-demand throughput (option B) is ideal for unpredictable or sporadic usage, but it becomes more expensive for stable traffic patterns because it charges per token with no discount for steady volume. Hosting the model on EC2 (option A) or Lambda (option C) increases operational overhead, requires model containerization, scaling management, and may not support LLM-level GPU performance efficiently. Bedrock Provisioned Throughput eliminates infrastructure management and provides the most cost-effective solution for stable, predictable workloads.

Referenced AWS Documentation:

Amazon Bedrock Developer Guide – Provisioned Throughput

AWS ML Specialty Study Guide – Cost Optimization for Generative AI

The verified answer is B. Data leakage. The model exposes sensitive company information because that information was inadvertently included in training data. AWS guidance warns that using sensitive data to train models can cause unintended disclosure of data from model output, including data leakage during inference. This is exactly the scenario: sensitive information entered the training process and later appeared in model output after deployment.

AWS security reference guidance for generative AI model customization identifies sensitive information disclosure as a threat where a model trained on datasets containing PII leaks sensitive information during inference. Although the question says company information rather than PII specifically, the same security principle applies: protected data included in training or continued pre-training can be memorized or reproduced by the model later.

Jailbreaking is incorrect because jailbreaking refers to attempts to bypass model safety controls through adversarial prompts. The problem here is not that a user bypassed safety controls; the sensitive information was already embedded through training data.

Contextual grounding is incorrect because grounding is a technique for improving answer accuracy by connecting model responses to trusted context, such as RAG sources. It is not a security risk.

Prompt injection is incorrect because prompt injection involves malicious input that attempts to override or manipulate model behavior at inference time. The question does not describe a malicious prompt. It describes accidental exposure from training data.

Therefore, the correct security risk is data leakage.

To comply with multiple regulatory frameworks, the company must ensure data protection and threat detection. Data protection involves safeguarding sensitive customer information, while threat detection identifies and mitigates security threats to the application.

Option C (Correct): " Data protection " : This is correct because data protection is critical for compliance with privacy and security regulations.

Option B (Correct): " Threat detection " : This is correct because detecting and mitigating threats is essential to maintaining the security posture required for regulatory compliance.

Option A: " Auto scaling inference endpoints " is incorrect because auto-scaling does not directly relate to regulatory compliance.

Option D: " Cost optimization " is incorrect because it is focused on managing expenses, not compliance.

Option E: " Loosely coupled microservices " is incorrect because this architectural approach does not directly address compliance requirements.

AWS AI Practitioner References:

AWS Compliance Capabilities: AWS offers services and tools, such as data protection and threat detection, to help companies meet regulatory requirements for security and privacy.

The verified answer is A. Amazon Bedrock Guardrails. AWS documentation states that Amazon Bedrock Guardrails helps detect sensitive information, including personally identifiable information, in input prompts or model responses by using sensitive information filters. AWS also states that these filters can be configured to block or mask detected PII. This directly matches the requirement to prevent a customer service agent from disclosing PII during conversations.

Bedrock Guardrails supports handling sensitive information in two key ways. A block action can block requests or responses that include sensitive information, and a mask action can anonymize or redact detected information in model requests or responses. AWS gives examples of PII categories such as names, email addresses, phone numbers, usernames, passwords, addresses, credit card numbers, PINs, and other sensitive identifiers. For a customer service agent, this is exactly the right feature because PII could appear in either the user input or the model response.

Amazon Bedrock Flows is incorrect because flows help orchestrate generative AI workflows. They do not primarily provide PII filtering. Amazon Bedrock Knowledge Bases is incorrect because knowledge bases support Retrieval Augmented Generation by connecting models to enterprise data sources. They help ground responses but do not directly block PII disclosure. Amazon Bedrock Data Automation is incorrect because BDA is used to transform and extract insights from multimodal content such as documents, images, audio, and video. It is not the runtime guardrail feature for blocking or masking PII in conversations.

Therefore, the correct Amazon Bedrock feature is Amazon Bedrock Guardrails.

To use a custom model that has been trained to improve summarization quality, the company must deploy the model on an Amazon SageMaker endpoint. This allows the model to be used for real-time inference through Amazon Bedrock or other AWS services. By deploying the model in SageMaker, the custom model can be accessed programmatically via API calls, enabling integration with Amazon Bedrock.

Option B (Correct): " Deploy the custom model in an Amazon SageMaker endpoint for real-time inference " : This is the correct answer because deploying the model on SageMaker enables it to serve real-time predictions and be integrated with Amazon Bedrock.

Option A: " Purchase Provisioned Throughput for the custom model " is incorrect because provisioned throughput is related to database or storage services, not model deployment.

Option C: " Register the model with the Amazon SageMaker Model Registry " is incorrect because while the model registry helps with model management, it does not make the model accessible for real-time inference.

Option D: " Grant access to the custom model in Amazon Bedrock " is incorrect because Bedrock does not directly manage custom model access; it relies on deployed endpoints like those in SageMaker.

AWS AI Practitioner References:

Amazon SageMaker Endpoints: AWS recommends deploying models to SageMaker endpoints to use them for real-time inference in various applications.

Diffusion models are state-of-the-art generative models for creating high-quality, realistic images from textual prompts or other forms of conditioning. These are the foundational technology behind tools like Amazon Bedrock Titan Image Generator and other generative image models.

The correct answer is A because temperature controls the randomness of a language model ' s output. A higher temperature increases diversity by making the model more likely to explore less probable tokens, while a lower temperature results in more deterministic and repetitive outputs.

From AWS documentation:

" The temperature parameter in LLMs adjusts the randomness of generated responses. Higher values (e.g., 0.8–1.0) produce more creative and diverse output, while lower values (e.g., 0.1–0.3) make output more focused and repetitive. "

Explanation of other options:

B. Batch size is related to training efficiency, not output diversity.

C. Learning rate affects the training convergence rate, not inference-time output variety.

D. Optimizer type is a training configuration that influences how the model learns during training, not diversity during inference.

Referenced AWS AI/ML Documents and Study Guides:

Amazon Bedrock – Parameter Tuning Guide

AWS Machine Learning Specialty Guide – LLM Inference Parameters

The verified answer is B. F1 score. This is a classic imbalanced classification problem. Only 5% of customers make purchases, so a model can achieve 95% accuracy by predicting “will not purchase” for nearly everyone. That looks good numerically but fails the business purpose because the model rarely identifies actual buyers. AWS documentation describes F1 as a balanced measure that takes class balance into account and defines it as the harmonic mean of precision and recall.

AWS machine learning documentation also explains that F1 is commonly used for classification tasks and that a high F1 score indicates the model performs well for both precision and recall. If precision or recall is weak, the F1 score drops, which helps expose problems that accuracy hides.

Option A is incorrect because overall accuracy is already misleading in the scenario. The model’s 95% accuracy is probably caused by the majority class: customers who do not buy. Accuracy does not show whether the model identifies the minority class, which is the actual buyer group.

Option C is incorrect because training time for each epoch measures training efficiency, not prediction quality. A model can train quickly and still fail to identify buyers.

Option D is incorrect because cost per inference request is an operational cost metric. It does not evaluate whether the model correctly identifies purchasing customers.

Because the dataset is imbalanced and the model misses the minority class, the company should use F1 score instead of accuracy.