Free Amazon Web Services AIF-C01 Practice Exam with Questions & Answers | Set: 3

AWS documentation defines prompt injection as a security and safety risk in which a user crafts input designed to override, manipulate, or bypass system-level instructions, safeguards, or intended model behavior . The example provided is a classic prompt injection attempt, where the user explicitly instructs the AI assistant to ignore prior rules and operate without restrictions.

In this scenario, the attacker is not exploiting training data or causing factual errors, but rather attempting to change the control flow and behavior of the AI system through malicious or manipulative prompts. AWS identifies prompt injection as a critical risk for generative AI systems, especially those exposed to end users through chat interfaces, APIs, or customer-facing applications.

The other options do not apply. Data bias relates to skewed or unfair training data. Hallucination refers to generating incorrect or fabricated information. Data exposure involves leaking sensitive or private data. None of these describe an attempt to override system instructions.

AWS recommends multiple mitigation strategies for prompt injection risks, including instruction hierarchy enforcement, prompt isolation, input validation, output filtering, and grounding responses using techniques such as Retrieval Augmented Generation . AWS also emphasizes the importance of clearly separating system instructions from user inputs to prevent unauthorized behavior changes.

Prompt injection is categorized by AWS as part of Responsible AI and security governance , highlighting the need for robust guardrails when deploying AI assistants in production. Therefore, the correct answer is prompt injection.

Amazon SageMaker Clarify provides built-in tools to detect bias in data and models, and to generate detailed explainability reports for model predictions, including SHAP values and feature importance.

A is correct:

“Amazon SageMaker Clarify provides bias detection, explainability for ML models, and comprehensive reports to satisfy regulatory and ethical requirements.”

(Reference: Amazon SageMaker Clarify Overview)

B (Data Wrangler) is for data preparation, not bias/explainability.

C (Model Cards) document models, but don’t detect bias or explain predictions.

D (AI Service Cards) provide transparency for AWS AI services, not custom model explainability.

Amazon Comprehend Medical is designed for processing medical records and extracting key clinical entities, useful for summaries. Per the AWS Comprehend Medical documentation:

“Amazon Comprehend Medical enables extraction of relevant medical information from unstructured clinical text such as medications, conditions, and relationships, making it ideal for summarization tasks.”

RAG combines large pre-trained models with retrieval mechanisms to fetch relevant context from a knowledge base. This approach is cost-effective as it eliminates the need for frequent model retraining while ensuring responses are contextually accurate and up to date. References: AWS RAG Techniques.

Comprehensive and Detailed Explanation (AWS AI documents):

AWS Responsible AI principles stress the importance of fairness, robustness, and accountability , which begin with the quality of the data used to train models. A responsible dataset should:

Be diverse , representing different populations, environments, and conditions to reduce bias

Be sourced from reputable and appropriate sources , ensuring data quality and ethical use

Have balanced categories , preventing the model from favoring one class over others and reducing the risk of discriminatory outcomes

These characteristics help ensure that the resulting image classification model behaves fairly, performs reliably across groups, and aligns with AWS Responsible AI best practices.

Why the other options are incorrect:

B focuses on dataset size rather than quality, balance, or representativeness.

C increases the risk of bias and poor generalization.

D limits diversity and does not inherently ensure fairness or accountability.

AWS AI Study Guide References:

AWS Responsible AI principles: fairness and data quality

AWS guidance on dataset selection and preparation for responsible ML

Comprehensive and Detailed Explanation From Exact AWS AI documents:

AWS PrivateLink enables private connectivity between AWS services through VPC endpoints, ensuring traffic does not traverse the public internet.

AWS guidance recommends PrivateLink for:

Secure, private service access

Regulatory and compliance requirements

VPC-based architecture

Why the other options are incorrect:

IAM (A) controls access, not network routing.

Macie (B) is a data security service.

VPC peering (D) is not required for Bedrock access.

AWS AI document references:

Amazon Bedrock Networking and Security

Private Connectivity with AWS PrivateLink

Secure AI Architectures on AWS

AWS documentation explains that data masking is a technique used to obscure sensitive information while preserving the usability of the dataset for analytics and machine learning. When sharing data with third parties, AWS recommends masking only the fields that contain personally identifiable information (PII) to minimize data exposure while maintaining data utility.

Applying data masking to PII fields ensures that sensitive attributes such as names, email addresses, phone numbers, or identification numbers are replaced with anonymized or obfuscated values. This allows the third-party provider to train machine learning models without accessing real personal data.

Masking all fields would unnecessarily reduce the dataset’s usefulness and could negatively impact model performance. Data encryption protects data at rest or in transit, but once the third party decrypts the dataset for processing, PII would still be exposed. Data labeling helps identify sensitive fields but does not prevent exposure.

AWS emphasizes that selective masking is a best practice for privacy-preserving data sharing , particularly in ML workflows where data structure and statistical properties must remain intact. Therefore, applying data masking only to PII fields is the correct solution.

Comprehensive and Detailed Explanation From Exact AWS AI documents:

Fine-tuning a pre-trained deep learning model (transfer learning) provides the lowest development effort because:

The model already understands general visual features

Only minimal training is required on the custom dataset

Feature extraction is handled automatically

AWS guidance strongly recommends transfer learning for image classification tasks when development speed and efficiency are priorities.

Why the other options are incorrect:

A and D require extensive feature engineering and tuning.

C (GANs) are designed for data generation, not classification.

AWS AI document references:

Transfer Learning for Computer Vision on AWS

Image Classification Best Practices with SageMaker

Deep Learning Model Reuse and Fine-Tuning

Amazon Comprehend is the correct service to analyze customer support interactions and identify frequently asked questions and insights.

Amazon Comprehend:

A natural language processing (NLP) service that uses machine learning to uncover insights and relationships in text.

Capable of extracting key phrases, detecting entities, analyzing sentiment, and identifying topics from text data, making it ideal for analyzing customer support interactions.

Why Option B is Correct:

Text Analysis Capabilities: Can process large volumes of text to identify common topics, phrases, and sentiment, providing valuable insights.

Suitable for Customer Support Analysis: Specifically designed to understand the content and meaning of text, which is key for identifying frequently asked questions.

Why Other Options are Incorrect:

A. Amazon Lex: Used for building conversational interfaces, not for text analysis.

C. Amazon Transcribe: Converts speech to text but does not perform text analysis.

D. Amazon Translate: Used for translating text between languages, not for analyzing content.