{"id":12550,"date":"2026-09-15T10:17:08","date_gmt":"2026-09-15T10:17:08","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12550"},"modified":"2026-09-15T10:17:08","modified_gmt":"2026-09-15T10:17:08","slug":"amazon-aws-certified-generative-ai-developer-professional-aip-c01-practice-test-questions-and-exam-dumps-part12-q221-240","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-generative-ai-developer-professional-aip-c01-practice-test-questions-and-exam-dumps-part12-q221-240\/","title":{"rendered":"Amazon AWS Certified Generative AI Developer &#8211; Professional AIP-C01 Practice Test Questions and Exam Dumps Part12 Q221-240"},"content":{"rendered":"<h2><b>View Full <a href=\"https:\/\/www.examlabs.com\/aws-certified-generative-ai-developer-professional-aip-c01-exam-dumps\">Amazon AWS Certified Generative AI Developer &#8211; Professional AIP-C01 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 221<\/b><\/h3>\n<p><b>Which technique allows a foundation model to receive a few examples of the desired task directly within the prompt?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fine-tuning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retrieval indexing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Few-shot prompting<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Model quantization<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Few-shot prompting provides a model with several examples of the expected input and output pattern directly within the prompt. These examples help the model infer how to perform the requested task without requiring model retraining. It can be useful for classification, formatting, extraction, and other tasks where examples clearly communicate the desired behavior. Fine-tuning changes model behavior through additional training, while retrieval indexing focuses on finding relevant information. Quantization is a model optimization technique rather than a prompting strategy.<\/span><\/p>\n<h3><b>Question 222<\/b><\/h3>\n<p><b>A developer needs a workflow in which several independent processing tasks execute at the same time before a final aggregation step. Which capability is most appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Sequential execution only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Parallel workflow execution<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manual approval for every task<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Single-threaded prompt generation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Parallel workflow execution allows independent tasks to run concurrently rather than waiting for each task to finish sequentially. This can significantly reduce total processing time when the tasks do not depend on one another. After the parallel branches complete, an aggregation step can combine their results. AWS Step Functions can support parallel workflow patterns and coordinate downstream processing. Sequential execution may increase latency unnecessarily, while manual approval or single-threaded execution does not provide an efficient solution for large numbers of independent operations.<\/span><\/p>\n<h3><b>Question 223<\/b><\/h3>\n<p><b>A RAG application uses one embedding model during ingestion and a different incompatible embedding model for user queries. What problem is most likely to occur?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Improved encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Faster API authentication<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Incorrect or poor similarity matching<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Automatic data synchronization<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Documents and queries used for vector similarity search should generally be represented using compatible embedding models and configurations. If documents are embedded using one model while queries are generated using an incompatible model, their vector representations may not be meaningfully comparable. This can result in poor retrieval quality even when the correct documents exist in the index. The developer should maintain embedding-model consistency and re-index existing data when changing embedding strategies if necessary. Encryption, authentication, and synchronization are separate architectural concerns.<\/span><\/p>\n<h3><b>Question 224<\/b><\/h3>\n<p><b>Which feature is most useful when an application needs to prevent certain categories of unsafe content from being generated or returned?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Bedrock Guardrails<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon S3 lifecycle rules<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS CloudFormation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon DynamoDB Streams<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon Bedrock Guardrails provides controls designed to help applications manage undesirable content and apply configurable safety policies to generative AI interactions. Depending on the configuration, guardrails can help address harmful content, denied topics, sensitive information, and other application-specific safety requirements. Guardrails should complement, rather than replace, authentication, authorization, input validation, and application-level security controls. S3 lifecycle rules manage stored objects, CloudFormation provisions resources, and DynamoDB Streams captures database changes. Guardrails are specifically relevant to generative AI safety enforcement.<\/span><\/p>\n<h3><b>Question 225<\/b><\/h3>\n<p><b>A developer wants an AI application to produce machine-readable JSON that follows a predefined structure. Which approach is most appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Allow completely unrestricted responses<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increase temperature substantially<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Remove output validation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use structured output instructions and validate the result<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Structured output instructions can tell the model to produce data according to a defined JSON schema or format. However, applications should still validate the generated response before using it programmatically. Validation can detect malformed JSON, missing fields, invalid values, or unexpected content. Depending on the model and application architecture, supported structured-output capabilities can provide additional reliability. Unrestricted generation and higher randomness can make parsing less predictable. Combining clear formatting requirements with programmatic validation provides a stronger approach for production applications.<\/span><\/p>\n<h3><b>Question 226<\/b><\/h3>\n<p><b>A developer wants to adapt a foundation model to consistently perform a specialized task using a collection of high-quality examples. Which approach may be appropriate when prompting alone is insufficient?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Model customization or fine-tuning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing CloudTrail retention<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Changing the S3 storage class<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Adding more IAM users<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Model customization or fine-tuning can be considered when an application requires more consistent behavior for a specialized task and prompt engineering alone does not provide adequate results. A carefully prepared training dataset is essential because poor-quality or inconsistent examples can negatively affect the customized model. Developers should evaluate whether customization provides sufficient benefits compared with prompt engineering, RAG, or model selection. CloudTrail retention, S3 storage classes, and IAM user counts do not directly change how a foundation model learns a specialized task.<\/span><\/p>\n<h3><b>Question 227<\/b><\/h3>\n<p><b>An AI agent receives a tool response containing unexpected fields and values. What should the application do before using the data in a subsequent sensitive operation?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trust the response automatically<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Validate and sanitize the tool output<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increase model temperature<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable authorization checks<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Tool outputs should be treated as untrusted data and validated before they influence sensitive actions. The application can check expected fields, data types, ranges, formats, and authorization requirements before passing information to another tool or executing an operation. This reduces the risk of malformed data, malicious content, or unexpected tool behavior propagating through an agent workflow. Model instructions alone are insufficient as a security boundary. Output validation should therefore be combined with least-privilege permissions and independent authorization checks.<\/span><\/p>\n<h3><b>Question 228<\/b><\/h3>\n<p><b>A company needs to define AWS infrastructure for its generative AI application in a repeatable way across development and production environments. Which approach is most appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Configure every resource manually<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use infrastructure as code<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store infrastructure credentials in prompts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rebuild resources from memory<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Infrastructure as code allows AWS resources and their configuration to be defined in reusable templates or code. This improves consistency, repeatability, reviewability, and deployment automation across environments. It also supports integration with CI\/CD pipelines and helps reduce configuration drift caused by manual changes. AWS CloudFormation and related infrastructure-as-code approaches can be used to provision application resources. Manual configuration is more error-prone and difficult to reproduce. Infrastructure definitions should also follow security and least-privilege principles.<\/span><\/p>\n<h3><b>Question 229<\/b><\/h3>\n<p><b>A RAG application retrieves documents using metadata such as department, region, and document type. What is a major benefit of this approach?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It can restrict retrieval to relevant subsets of data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It automatically increases model intelligence<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It eliminates the need for embeddings in every architecture<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It removes all authentication requirements<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Metadata filtering allows a retrieval system to narrow results according to attributes associated with documents. For example, an application could retrieve only documents belonging to a user&#8217;s department or a specific geographic region. This can improve retrieval relevance and help enforce data-isolation requirements when implemented with proper authorization controls. Metadata filtering does not make the foundation model inherently more intelligent and does not eliminate authentication. It should be combined with appropriate access-control mechanisms to ensure that filtering cannot be bypassed by malicious or unexpected requests.<\/span><\/p>\n<h3><b>Question 230<\/b><\/h3>\n<p><b>Which strategy can help reduce repeated processing costs when the same prompt and context are frequently submitted to a generative AI system?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing context size<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prompt or response caching where appropriate<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disabling monitoring<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing model temperature<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Caching can reduce unnecessary repeated processing when identical or sufficiently equivalent requests occur frequently. Depending on the application and supported architecture, prompt or response caching can reduce latency and inference costs. Developers must ensure that cached results remain valid and that sensitive or user-specific information is not incorrectly shared between users. Cache keys, expiration policies, and access boundaries should be carefully designed. Increasing context size can increase costs, while temperature affects generation behavior and monitoring should remain available for operational visibility.<\/span><\/p>\n<h3><b>Question 231<\/b><\/h3>\n<p><b>A developer is building an agent that must perform a sequence of actions based on intermediate results. Which characteristic distinguishes an agentic workflow from a simple single model invocation?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It can reason about a task and invoke tools or actions iteratively<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It never interacts with external systems<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It always produces the same response<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It requires no authorization controls<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An agentic workflow can use model reasoning to determine actions, invoke available tools, inspect results, and continue toward a goal. Unlike a simple single model invocation, an agent may perform multiple steps based on intermediate results. However, agentic behavior introduces additional security and reliability considerations because tool access can have real-world effects. Each action should therefore be constrained by appropriate permissions, validation, and monitoring. Agents do not automatically have authorization to perform every operation simply because the model requests it.<\/span><\/p>\n<h3><b>Question 232<\/b><\/h3>\n<p><b>A company wants to ensure that an AI application can recover from temporary downstream service failures without immediately failing the entire workflow. Which mechanism is most appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable all error handling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increase the prompt length<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use controlled retries with exponential backoff<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Give the application administrator permissions<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Controlled retries with exponential backoff can help an application recover from transient failures such as temporary throttling or service unavailability. Exponential backoff increases the waiting interval between attempts, while jitter can help prevent many clients from retrying simultaneously. Retry limits should be configured to prevent infinite loops and unnecessary costs. Applications should also distinguish transient failures from permanent errors that should not be retried. Prompt length and IAM administrator permissions do not provide resilience against downstream service failures.<\/span><\/p>\n<h3><b>Question 233<\/b><\/h3>\n<p><b>A developer wants to verify that an AI application&#8217;s answers are supported by retrieved source documents. Which evaluation dimension is most directly relevant?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Groundedness<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Storage utilization<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network bandwidth<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IAM policy size<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Groundedness evaluates whether a generated response is supported by the information available to the model, such as retrieved documents in a RAG workflow. High groundedness is important for applications where unsupported claims can create business, legal, or operational risks. Developers can evaluate responses against trusted reference information and identify unsupported statements. Storage utilization and network bandwidth can affect infrastructure performance, while IAM policy size concerns authorization configuration. They do not directly measure whether generated content is supported by retrieved evidence.<\/span><\/p>\n<h3><b>Question 234<\/b><\/h3>\n<p><b>A production application needs to detect when model invocation latency exceeds an acceptable threshold. Which capability should the developer configure?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 versioning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CloudWatch alarm<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">KMS key policy<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DynamoDB partition key<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A CloudWatch alarm can monitor a selected metric and trigger an alert when that metric crosses a defined threshold. For generative AI workloads, teams can monitor metrics related to latency, errors, throttling, resource utilization, and application-specific performance indicators. Alerts can help operations teams investigate problems before they significantly affect users. S3 versioning protects object versions, KMS key policies control key access, and DynamoDB partition keys determine data distribution. None of those capabilities directly provides threshold-based operational alerting.<\/span><\/p>\n<h3><b>Question 235<\/b><\/h3>\n<p><b>A developer is designing a prompt for a model that must classify support tickets into predefined categories. Which prompt design is likely to improve consistency?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Clearly define the categories and expected output format<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ask the model to invent new categories<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provide no classification criteria<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Require lengthy explanations for every classification<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Classification prompts should clearly describe the available categories, provide criteria for distinguishing them, and specify the expected output format. This reduces ambiguity and helps the model produce consistent results. Examples can also be included when useful, particularly when category boundaries are difficult to communicate through descriptions alone. Allowing the model to invent categories defeats the purpose of a predefined classification system. Requiring unnecessary explanations can increase output tokens and complicate downstream processing. The final classification should also be validated against application requirements.<\/span><\/p>\n<h3><b>Question 236<\/b><\/h3>\n<p><b>A company wants to expose a generative AI capability to multiple internal applications while applying authentication, throttling, and request controls. Which AWS service is a suitable API front door?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS Lambda<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon S3<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon API Gateway<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS KMS<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon API Gateway can provide a managed front door for APIs and support capabilities such as authentication integration, throttling, request handling, monitoring, and traffic management. It can be integrated with services such as Lambda and other backend components to expose generative AI functionality to internal or external applications. Lambda provides compute execution, S3 provides object storage, and KMS manages encryption keys. API Gateway can therefore help establish a controlled interface between clients and AI application backends.<\/span><\/p>\n<h3><b>Question 237<\/b><\/h3>\n<p><b>A RAG application has excellent retrieval recall but frequently includes irrelevant passages in the final context. Which improvement should the developer consider?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Remove all metadata<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increase the number of retrieved results indefinitely<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Apply reranking or improve retrieval precision<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable evaluation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">High recall means that relevant information is generally being retrieved, but excessive irrelevant content indicates that retrieval precision may need improvement. Reranking can reorder candidate documents according to relevance, while better metadata filtering, query formulation, similarity thresholds, and top-k configuration can reduce unnecessary context. Increasing the number of retrieved documents indefinitely can make the problem worse by adding more irrelevant information and increasing token usage. Evaluation should continue so developers can measure whether retrieval changes improve both relevance and downstream answer quality.<\/span><\/p>\n<h3><b>Question 238<\/b><\/h3>\n<p><b>Which practice helps prevent secrets from being accidentally exposed through source code repositories?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hard-code API keys in application files<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store secrets in a managed secrets service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Include passwords in prompts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Put credentials in public configuration files<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Managed secrets services such as AWS Secrets Manager provide a safer mechanism for storing credentials, API keys, and other sensitive information. Applications can retrieve secrets when required while access is controlled through IAM permissions. This avoids embedding long-lived credentials directly in source code or public configuration files. Developers should also use secret rotation where appropriate and ensure that secrets are not accidentally written to logs. Hard-coded credentials and credentials included in prompts create unnecessary exposure and should be avoided.<\/span><\/p>\n<h3><b>Question 239<\/b><\/h3>\n<p><b>A developer needs to determine whether a new prompt version improves answer quality without increasing cost excessively. Which evaluation should be performed?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Evaluate only visual appearance<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Measure quality and relevant cost metrics together<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ignore token usage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Test only the shortest possible prompt<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Prompt optimization should consider both response quality and operational cost. A new prompt might improve accuracy or groundedness while substantially increasing input or output tokens, making it unsuitable for production. Developers should evaluate representative queries and compare quality metrics with token usage, latency, and other relevant costs. Testing only a few simple examples can produce misleading results. A balanced evaluation provides evidence about whether the prompt delivers enough additional value to justify its operational impact.<\/span><\/p>\n<h3><b>Question 240<\/b><\/h3>\n<p><b>A developer wants to ensure that a model does not follow malicious instructions embedded inside retrieved documents. Which design approach is most appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Treat retrieved content as trusted system instructions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Clearly separate trusted instructions from untrusted retrieved content<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Give retrieved documents administrator permissions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Remove all authentication from the application<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Retrieved documents should generally be treated as untrusted data rather than trusted instructions. A secure prompt architecture should clearly distinguish system or developer instructions from retrieved content and explicitly tell the model how that content should be used. Additional protections such as input filtering, Bedrock Guardrails, tool authorization, and output validation can provide defense in depth. Treating retrieved text as authoritative instructions can expose the application to indirect prompt injection. Security controls should remain enforced outside the model wherever possible.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Amazon AWS Certified Generative AI Developer &#8211; Professional AIP-C01 Exam Dumps and Practice Test Dumps &nbsp; Question 221 Which technique allows a foundation model to receive a few examples of the desired task directly within the prompt? Fine-tuning Retrieval indexing Few-shot prompting Model quantization Correct Answer: 3 Explanation Few-shot prompting provides a model [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12550"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12550"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12550\/revisions"}],"predecessor-version":[{"id":12584,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12550\/revisions\/12584"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}