{"id":12558,"date":"2026-09-15T10:21:09","date_gmt":"2026-09-15T10:21:09","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12558"},"modified":"2026-09-15T10:21:09","modified_gmt":"2026-09-15T10:21:09","slug":"amazon-aws-certified-generative-ai-developer-professional-aip-c01-practice-test-questions-and-exam-dumps-part2-q21-40","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-generative-ai-developer-professional-aip-c01-practice-test-questions-and-exam-dumps-part2-q21-40\/","title":{"rendered":"Amazon AWS Certified Generative AI Developer &#8211; Professional AIP-C01 Practice Test Questions and Exam Dumps Part2 Q21-40"},"content":{"rendered":"<h2><b>View Full <a href=\"https:\/\/www.examlabs.com\/aws-certified-generative-ai-developer-professional-aip-c01-exam-dumps\">Amazon AWS Certified Generative AI Developer &#8211; Professional AIP-C01 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 21<\/b><\/h3>\n<p><b>Which technique converts text into numerical vectors for semantic search?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Tokenization<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Embedding<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Compression<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An embedding represents text as a numerical vector that captures aspects of its semantic meaning. Embeddings allow applications to compare the similarity between queries and stored content based on meaning rather than exact keyword matches. They are commonly used in retrieval-augmented generation applications, recommendation systems, and semantic search solutions. After documents are converted into embeddings, they can be stored in a vector database or supported search system. When a user submits a query, its embedding can be compared with stored vectors to retrieve relevant information.<\/span><\/p>\n<h3><b>Question 22<\/b><\/h3>\n<p><b>A developer is designing a customer-service chatbot that must answer questions using private company documents. What architecture is most suitable?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">RAG<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CDN<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Batch processing only<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Retrieval-Augmented Generation (RAG) is suitable when a generative AI application needs to use private or frequently changing information. The system retrieves relevant information from a company knowledge base and provides it to the foundation model as context. This allows the model to generate responses based on organizational data without requiring the model itself to be retrained whenever documents change. RAG can also improve grounding and reduce unsupported answers when the retrieved content is relevant, current, and authoritative.<\/span><\/p>\n<h3><b>Question 23<\/b><\/h3>\n<p><b>What is the primary purpose of Amazon Bedrock model evaluation?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To create DNS records<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To store application passwords<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To compare model performance against defined criteria<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To manage EC2 operating systems<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Model evaluation helps developers determine whether a foundation model is appropriate for a particular application. Evaluation can measure criteria such as accuracy, relevance, robustness, toxicity, latency, and other application-specific requirements. Teams can use representative datasets and consistent evaluation methods to compare different models or configurations. This is especially important before production deployment because the model that performs best in one scenario may not be the best choice for another. Evaluation provides measurable evidence for model selection and improvement.<\/span><\/p>\n<h3><b>Question 24<\/b><\/h3>\n<p><b>A developer wants to reduce hallucinations in an application that answers questions about company policies. Which approach is generally most effective?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increase temperature<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Remove the knowledge base<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increase unrelated context<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ground responses with trusted retrieved information<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Grounding a model with trusted, relevant information can reduce the likelihood of unsupported responses. In a company-policy application, a retrieval system can locate the appropriate policy documents and provide them as context to the foundation model. The prompt can also instruct the model to answer using the supplied sources and avoid inventing information when the answer is unavailable. Increasing temperature generally introduces more variation, while unrelated context can create confusion. Reliable retrieval and grounding are therefore important techniques for improving factual responses.<\/span><\/p>\n<h3><b>Question 25<\/b><\/h3>\n<p><b>What does temperature primarily influence in a generative AI model?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The randomness and variability of generated output<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The number of IAM users<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The size of an S3 bucket<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The network bandwidth<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Temperature is a generation parameter that influences how deterministic or varied model responses are. Lower values generally encourage more predictable outputs, while higher values can produce greater variation and creativity. The appropriate setting depends on the application. A factual extraction task may benefit from lower variability, whereas creative content generation may tolerate or benefit from more variation. Temperature does not control AWS permissions, storage capacity, or network bandwidth. Developers should evaluate the parameter using representative prompts rather than assuming one value is ideal for every use case.<\/span><\/p>\n<h3><b>Question 26<\/b><\/h3>\n<p><b>Which AWS service can be used as a managed vector search capability for generative AI workloads?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Route 53<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon OpenSearch Service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS CloudTrail<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon SNS<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon OpenSearch Service can support vector search workloads and is commonly used in retrieval architectures that require semantic similarity searches. Documents can be processed into embeddings and indexed so that applications can retrieve content based on vector similarity. This makes OpenSearch useful for RAG and other AI-powered search scenarios. Route 53 provides DNS services, CloudTrail records AWS API activity, and SNS provides messaging and notifications. The appropriate vector-search architecture depends on application requirements, scale, integration needs, and operational considerations.<\/span><\/p>\n<h3><b>Question 27<\/b><\/h3>\n<p><b>A team needs to provide a foundation model with only the most relevant portions of a large document. What should it use?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Chunking and retrieval<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Full-document duplication<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS caching<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Image compression<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Chunking divides large documents into smaller sections, while retrieval identifies the sections most relevant to a user&#8217;s query. Together, these techniques help provide focused context to a foundation model. This can improve retrieval quality and reduce unnecessary token usage compared with sending an entire document for every request. Chunking strategies should consider document structure and semantic boundaries rather than simply splitting text at arbitrary lengths. Retrieval can then select appropriate chunks for the model&#8217;s context during each application interaction.<\/span><\/p>\n<h3><b>Question 28<\/b><\/h3>\n<p><b>Why should prompts be versioned in a production generative AI application?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To increase DNS resolution speed<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To make prompts impossible to modify<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To track changes and reproduce application behavior<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To eliminate model evaluation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Prompt versioning helps development teams track changes to instructions, templates, variables, and formatting requirements over time. When application behavior changes, teams can identify which prompt version was responsible and reproduce earlier results when necessary. Versioning also supports controlled testing, rollback, collaboration, and evaluation across prompt iterations. Without version control, small prompt changes can be difficult to identify and may make production issues harder to troubleshoot. It is therefore an important engineering practice for maintaining reliable generative AI applications.<\/span><\/p>\n<h3><b>Question 29<\/b><\/h3>\n<p><b>A developer needs to prevent a model from discussing certain prohibited topics. Which capability should be considered?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon S3<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Bedrock Guardrails<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Route 53<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS Direct Connect<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon Bedrock Guardrails can help developers configure safeguards for generative AI applications. Organizations can define policies that restrict certain content categories or topics and help control model interactions according to application requirements. This can be useful for customer-facing applications where responses must comply with organizational policies. Guardrails should be considered alongside application-level validation, authorization, monitoring, and other security controls. S3, Route 53, and Direct Connect provide storage, DNS, and networking capabilities respectively and do not provide the same model-safety functionality.<\/span><\/p>\n<h3><b>Question 30<\/b><\/h3>\n<p><b>Which practice helps protect an application&#8217;s AWS credentials?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hard-code credentials in prompts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store credentials in source code<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Share credentials among all developers<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use IAM roles and managed secret-storage mechanisms<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">IAM roles and managed secret-storage mechanisms provide safer alternatives to embedding credentials directly in application code or prompts. IAM roles can provide temporary permissions to AWS resources, reducing the need for long-lived access keys. Services such as AWS Secrets Manager can securely store sensitive application secrets when they are required. Hard-coded credentials can accidentally be exposed through repositories, logs, or deployment packages. Applying least privilege and using secure credential-management practices helps reduce unauthorized access and supports stronger security for production AI applications.<\/span><\/p>\n<h3><b>Question 31<\/b><\/h3>\n<p><b>What is prompt injection?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A method of compressing prompts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">An attack that attempts to manipulate an AI system through crafted instructions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A database backup technique<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A method of increasing GPU memory<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Prompt injection occurs when an attacker or untrusted content attempts to influence a generative AI system by supplying instructions that conflict with the application&#8217;s intended behavior. This can happen through direct user prompts or indirectly through retrieved documents, web pages, or other external content. Developers should treat external data as potentially untrusted and use appropriate input controls, permissions, validation, guardrails, and output checks. Secure architecture is particularly important when an AI application can access confidential information or invoke external tools.<\/span><\/p>\n<h3><b>Question 32<\/b><\/h3>\n<p><b>A RAG system retrieves relevant documents, but the generated answer still contains incorrect information. What should the developer investigate first?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retrieval quality and prompt grounding<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS TTL values<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 storage class<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Network cable length<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">When relevant documents are retrieved but answers remain incorrect, developers should examine whether the retrieved content is actually sufficient, whether the prompt clearly instructs the model to use that context, and whether the retrieved passages contain conflicting or outdated information. Retrieval ranking, chunking, metadata filters, and context ordering can also affect results. The model may still generate unsupported content if grounding instructions are weak or if retrieved information is ambiguous. Evaluating the complete retrieval-to-generation pipeline is therefore important.<\/span><\/p>\n<h3><b>Question 33<\/b><\/h3>\n<p><b>Which metric is especially useful when assessing how quickly a generative AI application responds to users?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Storage capacity<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Latency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS record count<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Number of IAM groups<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Latency measures the time required for an operation to produce a response. In generative AI applications, latency can affect user experience and may depend on model selection, prompt size, retrieved context, network conditions, workload, and output length. Developers should measure latency using realistic workloads rather than relying only on theoretical performance. Monitoring latency alongside quality and cost helps teams select an appropriate architecture. A highly capable model may not be suitable for an interactive application if its response time consistently exceeds business requirements.<\/span><\/p>\n<h3><b>Question 34<\/b><\/h3>\n<p><b>A developer wants an AI application to return only information supported by retrieved documents. Which instruction is useful?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ask the model to invent missing details<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Tell the model to ignore retrieved context<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Instruct the model to use the provided context and state when information is unavailable<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Remove all source documents<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A grounding instruction can tell the model to base its response on the supplied context and avoid inventing information that is not supported. It can also instruct the model to clearly state when the available sources do not contain an answer. This does not completely eliminate hallucinations, so applications should combine prompting with retrieval-quality improvements, validation, evaluation, and other safeguards. Ignoring retrieved information or encouraging invented details works against factual reliability. Clear instructions can therefore strengthen the behavior of knowledge-grounded applications.<\/span><\/p>\n<h3><b>Question 35<\/b><\/h3>\n<p><b>What is fine-tuning primarily used for?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Teaching a model application-specific patterns or behaviors using additional training data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Creating DNS records<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing S3 storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Monitoring CloudWatch alarms<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Fine-tuning adapts a supported foundation model using additional training examples so that it can better perform particular tasks, follow desired patterns, or reflect specialized requirements. It differs from RAG, where external information is retrieved at inference time and supplied as context. Fine-tuning can be useful when consistent behavior or task-specific patterns are needed, but it should not automatically be treated as a replacement for retrieval of frequently changing factual information. Developers should evaluate whether prompting, RAG, fine-tuning, or a combination best meets the use case.<\/span><\/p>\n<h3><b>Question 36<\/b><\/h3>\n<p><b>A developer wants to test whether a new prompt improves answer quality without immediately replacing the production prompt. What should the developer do?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Delete the existing prompt<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Test the new prompt against a representative evaluation dataset<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable monitoring<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increase all model parameters randomly<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Testing a new prompt against a representative evaluation dataset allows developers to compare the new behavior with the existing implementation before production deployment. Evaluation can measure quality, factuality, relevance, formatting compliance, latency, and other application-specific criteria. This controlled process reduces the risk of introducing regressions that may not be obvious from a few manual examples. Production systems should use versioning and controlled rollout practices when appropriate. Prompt changes should therefore be evaluated systematically rather than adopted solely because a few responses appear better.<\/span><\/p>\n<h3><b>Question 37<\/b><\/h3>\n<p><b>Which AWS service is commonly used to store documents that may serve as source data for a generative AI knowledge base?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon S3<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Route 53<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS CloudTrail<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon EventBridge Scheduler<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon S3 provides highly durable object storage and can store documents such as PDFs, text files, and other source material used by generative AI applications. These objects can serve as input to data-processing or knowledge-base workflows before content is chunked, embedded, and indexed for retrieval. S3 can also integrate with many AWS services and application architectures. Route 53 handles DNS, CloudTrail provides auditing, and EventBridge Scheduler is designed for scheduled tasks. S3 is therefore a common choice for source-document storage.<\/span><\/p>\n<h3><b>Question 38<\/b><\/h3>\n<p><b>An AI agent can call a financial transaction API. What is the most important security principle when granting the agent access?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Give it unrestricted permissions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use least privilege and restrict available actions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable authentication<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store API keys in the system prompt<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Agents that can perform consequential actions should receive only the permissions necessary to complete their intended tasks. Least privilege limits the potential impact of incorrect model decisions, compromised inputs, or unexpected tool calls. Developers should also consider authorization checks, input validation, transaction limits, human approval for high-impact operations, logging, and monitoring. Giving an agent unrestricted access creates unnecessary risk. API credentials should be securely managed rather than placed in prompts. Strong permission boundaries are essential for safe agentic applications.<\/span><\/p>\n<h3><b>Question 39<\/b><\/h3>\n<p><b>Which option best describes a foundation model?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A model trained broadly that can be adapted or prompted for many tasks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A DNS management system<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A storage encryption key<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A network routing table<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A foundation model is a broadly trained model that can support a wide range of tasks through prompting, adaptation, or other techniques. Generative foundation models can perform activities such as text generation, summarization, classification, question answering, and other supported tasks. Developers can select a model based on capabilities, cost, latency, context requirements, modality, and application needs. A foundation model is fundamentally different from infrastructure components such as routing tables, encryption keys, or DNS services because it provides learned capabilities for AI workloads.<\/span><\/p>\n<h3><b>Question 40<\/b><\/h3>\n<p><b>A production application needs to detect abnormal increases in model invocation errors. What should the team configure?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">An S3 bucket policy only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A DNS alias<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Monitoring metrics and alarms<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A larger prompt<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Monitoring metrics and alarms can help teams detect abnormal increases in application errors and respond quickly to operational problems. For a generative AI workload, useful signals may include invocation failures, latency, throttling, request volume, and other service or application metrics. Alert thresholds should reflect normal workload behavior so that teams avoid excessive false alarms. Monitoring should be combined with logging and appropriate incident-response procedures. A larger prompt or DNS configuration does not provide the required operational visibility into model invocation failures.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Amazon AWS Certified Generative AI Developer &#8211; Professional AIP-C01 Exam Dumps and Practice Test Dumps &nbsp; Question 21 Which technique converts text into numerical vectors for semantic search? Tokenization Embedding Encryption Compression Correct Answer: 2 Explanation An embedding represents text as a numerical vector that captures aspects of its semantic meaning. Embeddings allow [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1649,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12558"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12558"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12558\/revisions"}],"predecessor-version":[{"id":12594,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12558\/revisions\/12594"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}