AIP-C01 Amazon Web Services AWS Certified Generative AI Developer - Professional Free Practice Exam Questions (2026 Updated)

Option A is the only choice that establishes controls across the complete input-inference-output path. Amazon Bedrock Guardrails provides managed safeguards that evaluate model prompts and responses. AWS explicitly supports a PROMPT_ATTACK content-filter category designed to detect jailbreaks, prompt injection, and—with the appropriate tier—prompt leakage. Prompt injection attempts try to override developer instructions, while jailbreaks attempt to circumvent native model safety controls.

When using Guardrails with model invocation APIs, applications can mark untrusted user content with guardrail input tags so that the prompt-attack filter evaluates the user-controlled portion without incorrectly treating developer or system instructions as adversarial content. Guardrails can then block detected prompt attacks before unsafe content is processed. Content filters and other guardrail policies can also inspect generated model responses before they reach the end user.

AWS also recommends associating a Guardrail with Amazon Bedrock agents to help protect against prompt injection. System prompts remain useful as a defense-in-depth technique because they define the agent ' s scope, but AWS does not treat system prompting alone as an adequate security boundary.

The Lambda sanitization and output-validation portions of A can provide additional application-specific checks. In a modern implementation, Guardrails itself can perform substantially more of the input and output filtering, reducing the amount of custom Lambda logic required.

B relies entirely on probabilistic prompting and therefore lacks deterministic managed enforcement. C is fundamentally unsafe because authenticated users can still be malicious or compromised. D is reactive monitoring: logging and periodically searching historical prompts may help investigations, but it does not prevent an attack before inference or block unsafe responses.

Therefore, A is the only listed design that combines pre-processing controls, managed inference-time safeguards, and output validation.

==========

Option B is the best solution because it directly addresses the Step Functions 256 KB state payload quota by externalizing large intermediate artifacts to Amazon S3 and passing only lightweight references (URIs/keys) between states. This is a standard AWS pattern for workflows that produce large intermediate results, and it avoids introducing additional databases, compression logic, or cross-state-machine coordination that increases operational overhead.

In a multi-agent ReAct workflow, intermediate reasoning traces can be verbose and grow quickly as each agent produces chain-of-thought style artifacts, structured outputs, and supporting evidence. Step Functions is designed to orchestrate state transitions and pass JSON payloads, but large payloads should be stored outside the state machine and referenced by pointer values. Using Amazon S3 for intermediate outputs is operationally efficient because the application already uses S3 for storage, and S3 provides durable, low-cost storage with simple access patterns.

ResultPath and ResultSelector allow each state to store or reshape results so that only the required reference fields (such as s3Uri, object key, metadata, trace IDs) are forwarded to subsequent states. This preserves observability because the workflow can still log trace references, correlate steps with S3 objects, and store structured metadata for debugging. It also preserves the sequential validation design, keeping the existing ReAct pattern intact while preventing failures due to oversized payloads.

Option A adds additional services and read/write patterns that increase operational complexity. Option C introduces custom compression/decompression logic that is fragile, adds latency, and complicates troubleshooting. Option D increases orchestration overhead by splitting workflows and coordinating with events, which makes debugging harder and increases failure modes.

Therefore, Option B meets the payload limit requirement while keeping the architecture simple and observable.

Option A is the correct solution because it provides proactive, model-aware token management with fine- grained visibility and alerting, which is required for regulated financial workloads. Amazon Bedrock currently exposes token usage metrics after invocation, but it does not natively enforce proactive, model-specific token limits across multiple applications or business units.

By implementing model-specific tokenizers in AWS Lambda, the company can estimate input and output token usage before sending requests to Amazon Bedrock. This enables early detection of requests that are approaching or exceeding model limits and allows the application to block, truncate, or reroute requests proactively rather than reacting to failures.

Publishing token usage metrics to Amazon CloudWatch enables real-time monitoring and alerting at scale, easily supporting more than 5,000 requests per minute. Storing detailed token usage data in Amazon DynamoDB allows the company to attribute usage and costs to specific applications, teams, or business units—an essential requirement for regulatory reporting and internal chargeback.

Option B is incorrect because Amazon Bedrock Guardrails do not currently provide token quota enforcement or proactive token alerts. Option C is reactive and only analyzes failures after they occur. Option D throttles requests but cannot enforce token-based limits or provide per-model cost attribution.

Therefore, Option A best satisfies proactive alerting, scalability, compliance reporting, and cost allocation requirements with acceptable operational effort.

Option B best meets the requirements because it provides systematic diagnosis, measurable comparison, and historical traceability of prompt performance. By placing prompts under version control and testing them against complex clinical documents, the company can consistently reproduce issues, track regressions, and compare prompt behavior using quantifiable metrics such as factual accuracy, completeness, and consistency. Automated testing ensures scalability and repeatability, while version history preserves prompt evolution over time.

Option A lacks objective metrics and does not address complex documents. Option C focuses on live traffic experimentation but does not inherently diagnose prompt inconsistencies or preserve detailed historical evaluations. Option D adds medical entity analysis but introduces unnecessary service coupling and does not provide robust prompt version history or automated comparative benchmarking. Therefore, Option B is the most complete and disciplined solution.

Option B is correct because the workload has predictable short peak periods, strict low-latency requirements, and lower demand between spikes. Amazon SageMaker Serverless Inference is designed for intermittent or unpredictable traffic because SageMaker manages the infrastructure and the customer pays based on usage rather than continuously running idle instances. AWS documentation describes serverless inference as suitable when traffic is intermittent or unpredictable and when users do not want to manage instances or scaling policies.

Provisioned concurrency is the key part of this answer. For latency-sensitive serverless inference workloads, provisioned concurrency keeps the required number of serverless instances initialized and ready to respond. AWS documentation states that SageMaker Serverless Inference integrates with Application Auto Scaling so provisioned concurrency can be scaled up or down based on a target metric or schedule. This fits a daily 2-hour peak window because the company can configure enough provisioned concurrency for 500 concurrent requests during peak periods and scale down when demand decreases.

Deploying each model to a separate serverless endpoint is also important. The categorization, extraction, and response-generation models likely have different memory, latency, and concurrency needs. Separate endpoints allow independent memory sizing, maximum concurrency configuration, monitoring, and scaling for each task. AWS API documentation also shows that serverless endpoint configuration includes maximum concurrency and provisioned concurrency settings, with provisioned concurrency required to be less than or equal to maximum concurrency.

Option A is less suitable because multi-model endpoints are usually best when many models can share infrastructure, but model loading and shared capacity can add latency risk. Option C assumes Amazon Bedrock provisioned throughput for models, but the company is developing specialized NLP models and needs task-specific deployment controls. Request batching can also add latency. Option D uses asynchronous inference, which is inappropriate for a less-than-500-ms synchronous response requirement. Therefore, option B best satisfies latency, concurrency, accuracy isolation, and resource optimization.

==========

Amazon Bedrock Flows—referred to as “Amazon Bedrock Prompt Flows” in the question—is the lowest-complexity solution because the workflow consists primarily of generative-AI processing stages and one straightforward conditional branch. Bedrock Flows provides a managed visual workflow environment in which nodes represent steps that invoke Amazon Bedrock or related resources. This eliminates the need to build a separate orchestration service merely to connect multiple model interactions.

A prompt node defines a prompt, receives values as input variables, invokes the configured model, and produces the model completion as its output. Therefore, separate prompt nodes can represent document analysis, structured data extraction, fraud analysis, and recommendation generation.

A condition node provides deterministic branching. AWS documents relational operators including > , > = , < , < = , == , and != , and the node can direct its input to different downstream nodes based on the configured condition. The application can therefore test whether the claim amount is greater than $10,000. Claims above that threshold are routed through the fraud-analysis node before reaching the recommendation stage; other claims can go directly to recommendation generation.

A Step Functions implementation in A would work technically and is appropriate when orchestration spans a broad set of distributed AWS services. However, for a Bedrock-centric GenAI workflow, it adds another orchestration layer and therefore is not the least-complex solution. B unnecessarily introduces autonomous agent reasoning for deterministic sequential processing. D requires custom Lambda invocation code, error handling, routing logic, deployment, and maintenance.

Because the required workflow maps directly to Bedrock ' s managed prompt and condition nodes, C minimizes infrastructure and custom orchestration while preserving deterministic control over the $10,000 fraud-analysis requirement.

==========

The correct answers are A and D because they collectively satisfy the requirements for structured inputs, consistent output formatting, and non-blocking detection of bullying language.

Option A is required because Amazon Bedrock Prompt Management enables prompt templates with explicit input variables and defined output formats. By defining the four required inputs as variables, the company ensures that every invocation of the Amazon Nova Pro FM receives the correct structured inputs. Specifying the output format ensures consistent responses, which is essential for a grants application workflow. Adding the managed prompt to the prompts node of the flow allows Bedrock Flows to invoke the model using this standardized configuration.

Option D addresses the requirement to receive notifications when bullying language is detected without blocking responses. Amazon Bedrock guardrails support content filters with configurable actions. By applying the insults content filter and setting the response action to detect, the system flags responses containing bullying or insulting language while still allowing the response to be returned. This enables monitoring, alerting, and auditing without interrupting application functionality.

Option B is incorrect because setting the filter response to block contradicts the requirement not to block all flagged responses. Option C introduces a prompt router, which is unnecessary because the application uses a single Amazon Nova Pro FM. Option E incorrectly attempts to enforce input variables and output formatting through an inference profile, which does not provide prompt-level variable enforcement or formatting guarantees.

Therefore, A and D together provide structured prompt management and non-blocking safety detection with minimal operational complexity.

Option D is the correct solution because Amazon Q Developer customizations are designed to incorporate organization-approved knowledge and coding guidance without requiring per-project changes. A customization can point Amazon Q Developer to curated internal sources such as approved libraries, coding standards, architectural patterns, and proprietary techniques. This allows the assistant’s suggestions to align with company policies and preferred implementations consistently across teams and repositories.

The key requirement is that the company does not want to make project-level modifications. Options A, B, and C all require adding files or repositories into the project workspace, which directly violates this constraint. They also rely on developer behavior to “use workspace context,” which is harder to enforce and can lead to inconsistent adherence to standards.

With a customization, the organization centrally manages and updates approved resources. This reduces operational overhead because updates to libraries, patterns, or guidelines propagate automatically to developers using the customization, without requiring changes to each project. This is especially valuable for a new team, where consistent enforcement of approved practices is important to reduce compliance risk, security issues, and inconsistent code style.

Additionally, customizations support governance by allowing the company to standardize how Amazon Q Developer responds, ensuring that suggestions reflect approved internal content rather than generic public patterns.

Therefore, Option D best satisfies the requirement for centralized enforcement of approved resources with minimal ongoing management and no project-level modifications.

AWS Glue Data Catalog and its associated crawlers are the standard AWS tools for automatic discovery and centralized cataloging of datasets. For the generated summaries, storing them in Amazon S3 allows the use of object tags for metadata (like source IDs), making them easily queryable. The critical requirement for " tamper-evident, immutable audit logs " is met by enabling Bedrock model invocation logging to an S3 bucket protected by S3 Object Lock (compliance mode). To further guarantee that logs have not been altered, AWS CloudTrail log file integrity validation uses cryptographic hashes to provide non-repudiation and a verifiable audit trail. This combination covers data management, metadata attribution, and high-standard security compliance.

Option C provides the strongest combination of residency controls, data classification, retention protection, and auditability. Keeping source data in Region-specific S3 buckets and processing it according to geographic origin establishes a clear architectural boundary around data belonging to Europe, North America, and Asia. Amazon S3 Object Lock provides write-once-read-many protection and can prevent protected object versions from being overwritten or deleted, which is particularly valuable for regulated records and audit evidence. Compliance mode provides especially strong retention enforcement.

Amazon Macie provides the required classification capability. Macie performs automated sensitive-data discovery against Amazon S3 and produces classification results describing whether analyzed objects contain sensitive information. It also calculates sensitivity scores and labels for monitored S3 buckets, supporting governance and compliance workflows.

AWS CloudTrail supplies auditable records of AWS API activity. When CloudTrail log-file integrity validation is enabled, CloudTrail uses SHA-256 hashing and digital signatures so modifications or deletions of delivered logs can be detected. Combined with protected S3 storage, this provides a strong evidentiary audit trail.

AWS now also supports geographic cross-Region inference profiles for Amazon Bedrock that keep inference processing within defined geographic boundaries such as the US, EU, and APAC. However, option A merely states “cross-Region inference” and lacks the required classification service while relying on manual compliance tracking. Geographic residency must be explicitly controlled rather than assumed.

B does not provide a data-classification mechanism. D creates significantly greater administrative burden and depends on custom monitoring and manual reporting. Therefore, C best satisfies the combined residency, classification, audit, and compliance requirements.

==========

Option A is the correct solution because hybrid search directly addresses the core retrieval failure modes while maintaining low latency and minimal operational overhead. In medical and scientific domains, exact terminology, abbreviations, and acronyms (for example, drug names, procedures, or conditions) are critical. Pure vector similarity search often underweights these exact matches, leading to missed results and excessive semantically related but irrelevant documents.

Amazon OpenSearch Service natively supports hybrid search, which combines keyword-based retrieval (such as BM25) with vector similarity search. Keyword search ensures precise matching for exact terms and acronyms, while vector search captures semantic meaning and contextual similarity. By blending these approaches, the retrieval system improves both precision and recall without introducing additional infrastructure.

Hybrid search operates within the same OpenSearch index and query path, which preserves low end-user latency even at large scale. This is especially important as the document collection grows to millions of documents. Because OpenSearch handles scoring and ranking internally, no additional orchestration layers or post-processing steps are required.

Option B increases computational cost and latency while failing to address exact-term recall. Option C introduces a new service and ingestion pipeline, increasing operational overhead and latency. Option D adds model hosting, re-ranking infrastructure, and complexity that is unnecessary when OpenSearch provides native hybrid retrieval.

Therefore, Option A delivers the best balance of retrieval quality, scalability, latency, and operational simplicity for medical RAG workloads.

Option B is the correct solution because it aligns with AWS guidance for building high-throughput, ultra-low-latency GenAI applications while maintaining predictable costs and automatic scaling. Amazon Bedrock provides access to foundation models that are specifically optimized for real-time inference use cases, including conversational and recommendation-style workloads that require responses within milliseconds.

Low-latency models in Amazon Bedrock are designed to handle very high request rates with minimal per-request overhead. Purchasing provisioned throughput ensures that sufficient model capacity is reserved to handle peak loads, eliminating cold starts and reducing request queuing during traffic surges. This is critical when supporting up to 500,000 concurrent calls with strict latency requirements.

Automatic scaling policies allow the application to dynamically adjust capacity based on demand, ensuring cost efficiency during off-peak hours while maintaining performance during peak usage. This directly supports the requirement to stay within a predefined monthly compute budget.

Option A fails because batch processing and complex reasoning models introduce higher latency and are not suitable for real-time suggestions. Option C introduces significantly higher operational and cost overhead due to dedicated GPU instances and manual scaling responsibilities. Option D is optimized for batch workloads and cannot meet the sub-200 ms latency requirement.

Therefore, Option B provides the best balance of performance, scalability, cost control, and operational simplicity using AWS-native GenAI services.

Option B is the correct solution because Amazon Bedrock Prompt Management is purpose-built to manage, govern, and standardize prompt usage at scale across teams and Regions. It provides native version control, allowing teams to track prompt changes over time and ensure that only approved versions are used in production workflows.

Prompt Management supports approval workflows that align with enterprise governance requirements. Approval permissions can be enforced through IAM policies, ensuring that only authorized reviewers can approve or publish prompt versions. This removes the need for custom workflow engines or external storage systems, significantly reducing operational overhead.

Parameterized prompt templates enable consistent prompt structure while allowing controlled variation through defined variables. This ensures consistent quality standards and reduces prompt drift, which is critical when hundreds of prompts are reused across multiple applications and teams.

AWS CloudTrail integrates natively with Amazon Bedrock to provide immutable audit logs for prompt creation, updates, approvals, and usage. These detailed audit trails satisfy compliance requirements and allow security and governance teams to trace prompt activity across Regions and users.

Option A requires significant custom development to coordinate approvals and maintain state. Option C relies on general-purpose workflow services and manual versioning mechanisms that are error-prone and difficult to scale. Option D uses services not designed for large-scale GenAI prompt governance and introduces unnecessary complexity.

Therefore, Option B best meets the requirements for scalable, auditable, and low-overhead governance of AI-generated content using Amazon Bedrock.

Amazon Bedrock AgentCore Gateway is specifically designed to expose existing APIs, Lambda functions, services, and MCP servers to agents through a standardized Model Context Protocol interface. AWS documents that Gateway can transform REST APIs represented by OpenAPI specifications into MCP-compatible tools and provide agents with a unified endpoint for tool discovery and invocation. This directly satisfies the requirement to add or expose warehouse, shipping, and customs capabilities through MCP without repeatedly modifying agent integration code.

AWS Step Functions is appropriate for deterministic workflow orchestration. Task states can represent individual reasoning or tool-execution stages, while built-in Retry configuration supports IntervalSeconds , MaxAttempts , and BackoffRate . These settings provide controlled retries with exponential backoff and a defined maximum retry budget rather than requiring bespoke retry code. AWS explicitly documents MaxAttempts as the mechanism that stops retry behavior after the configured limit is reached.

A Choice state supplies deterministic conditional routing. The shipment value can be evaluated and requests above $100,000 can be sent to an approval branch. The approval task can use the Step Functions callback/task-token integration, which pauses workflow execution until an external process—such as a human approval system—returns success or failure. AWS specifically identifies human approval as a callback-task use case.

D is weaker because critical retry and approval policy should not depend solely on probabilistic orchestration prompts. E and G introduce unnecessary custom operational logic. F misuses Guardrails: Bedrock Guardrails governs model input/output safety and policy filtering; it is not a general-purpose human workflow orchestrator for shipment authorization.

==========

Options A, D, and E provide the required capabilities while minimizing custom infrastructure. Amazon Transcribe converts speech in uploaded media into text, Amazon Comprehend provides managed sentiment detection, and Bedrock Knowledge Bases can support embedding-based semantic retrieval over transcript content. DynamoDB is appropriate for lightweight, scalable counters such as views and positive-feedback totals and avoids operating a relational vector database solely for metrics. The Strands Agents SDK provides prebuilt HTTP-request tooling for invoking the existing chat API and supports tool-based and multi-agent orchestration patterns, reducing bespoke integration code. Option B adds Step Functions and Lambda when Strands can coordinate the required application interactions directly. Option C requires custom orchestration and error-management code. Option F introduces Aurora PostgreSQL and pgvector even though vector retrieval is already handled through the Bedrock knowledge-base layer. AWS Documentation

================

Option D is correct because AgentCore Observability is purpose-built for tracing and troubleshooting agentic workloads. AgentCore traces capture the complete execution path, including processing steps, external service calls, tool invocations with inputs and outputs, execution times, decision points, exceptions, recovery attempts, and final responses. CloudWatch Generative AI Observability provides preconfigured views for agent, model, tool, latency, token, and error behavior, allowing development and security teams to investigate failures from shared telemetry instead of correlating several independent logging systems. AWS Distro for OpenTelemetry provides standardized instrumentation for non-runtime agents and related application components. CloudWatch also provides sensitive-data protection capabilities for observability data. Options A and C provide infrastructure-focused monitoring but require more manual correlation and custom dashboards. Option B does not provide the same production-grade centralized AgentCore telemetry. AWS Documentation

================

Option A is the correct answer because Amazon Bedrock Flows is purpose-built to orchestrate generative AI workflows that combine data access, deterministic transformations, and model invocation with minimal operational overhead. The requirements explicitly state that the workflow must retrieve content from Amazon S3, extract a specific portion of a predefined template, send that portion to an Amazon Bedrock model, and store the model’s response back into the same S3 bucket. Amazon Bedrock Flows natively supports all of these steps.

By configuring S3 action nodes at the beginning and end of the flow, the workflow can retrieve the original communications and persist the reviewed output without custom code. The expression step allows deterministic parsing of a specific portion of the template, which is essential when only part of the message should be reviewed. This avoids relying on generative logic for parsing, which would be less predictable and harder to audit. The agent step is then used specifically for the review task, where the foundation model evaluates or modifies the extracted content.

Option B uses AWS Step Functions, which can achieve similar outcomes but requires more explicit orchestration logic and does not provide GenAI-native constructs such as expressions and agent steps in a single managed experience. Options C and D rely on Amazon Bedrock agents and AWS Lambda functions to handle parsing and data movement, which increases complexity, operational overhead, and maintenance burden.

Because Amazon Bedrock Flows directly integrates S3 actions, parsing expressions, and model review steps in a single managed workflow, Option A best meets the requirements with the least development and operational effort.

Option B best meets the multimodal, ethical, and auditability requirements using managed AWS services designed for research-grade GenAI systems. Multimodal data such as audio, video, sensor telemetry, and tracking data must be curated and summarized before being consumed by a foundation model. Amazon SageMaker Processing and Amazon Transcribe provide scalable, managed preprocessing for audiovisual and textual data.

By ingesting summarized, validated observations into Amazon Bedrock Knowledge Bases, the GenAI assistant can answer natural language queries using grounded, evidence-based context instead of raw sensor signals. This significantly reduces the risk of speculative or anthropomorphic interpretations.

Amazon Bedrock guardrails are critical for preventing speculative behavioral claims, enforcing scientific and ethical constraints at inference time. Guardrails provide a validated, auditable safety layer that custom Lambda-based filters cannot reliably replicate.

AWS AppConfig enables controlled prompt management and change governance, ensuring that research prompts remain consistent and reviewable. AWS CloudTrail captures all access, query, and configuration changes, supporting ethical research audits and regulatory reviews.

Option A lacks grounding and speculative safeguards. Option C focuses on text analytics and does not properly handle multimodal reasoning or safety enforcement. Option D relies heavily on custom logic and introduces unnecessary operational risk.

Therefore, Option B provides the most robust, ethical, and auditable GenAI architecture for wildlife behavior research.

Option A addresses all three governance layers. Model cards provide documented information about a model’s capabilities, limitations, supported modalities, context constraints, and other characteristics that teams can review before deployment. Amazon Bedrock Guardrails can enforce application-specific safeguards on user inputs and model responses, and IAM policies can require a specific guardrail for inference calls, helping prevent uncontrolled model use. Storing generated outputs in Amazon S3 provides durable audit storage, while S3 Object Lock uses a write-once-read-many model that can prevent retained objects from being overwritten or deleted and is specifically intended to support regulatory retention requirements. Option B lacks formal model-limit documentation and relies on custom postprocessing. Option C does not protect stored audit evidence against tampering. Option D relies primarily on prompts and ordinary database storage rather than enforceable safety and immutable-retention controls. AWS Documentation

================