Course menuAIF-C01

Exams / AIF-C01 / Study guide / Responsible AI and guardrails

Responsible AI and guardrails: AIF-C01 study notes and practice questions

What to know about Responsible AI and guardrails for the AIF-C01 exam, from the Guidelines for Responsible AI domain (14% of the exam guide), then 5 free questions to test it. Part of the AIF-C01 study guide.

Last verified against current AWS documentation ·How we write our questions

What to know for the exam

Responsible AI questions name a risk and ask which practice or AWS feature addresses it.

The dimensions

Dimension Meaning
Fairness Works equally well for different groups
Explainability People can understand why it produced an output
Privacy and security Data is protected and used properly
Safety Avoids harmful output and misuse
Controllability Humans can monitor and steer it
Veracity and robustness Correct outputs, even with unexpected or adversarial inputs
Governance Clear policies, accountability and processes
Transparency People know they are dealing with AI and how it’s used

Amazon Bedrock Guardrails

Policy Handles
Content filters Hate, insults, sexual content, violence, misconduct, and prompt attacks
Denied topics Subjects the application must not discuss, such as investment advice
Word filters Specific words or phrases
Sensitive information filters Block or mask PII
Contextual grounding checks Answers not supported by the source documents (hallucinations in RAG)
Automated Reasoning checks Verify answers against formal rules

Guardrails work on both user input and model output, and with any model.

Other practices and tools

  • Human review with Amazon Augmented AI (A2I) for sensitive decisions.
  • SageMaker Clarify to detect bias and explain predictions.
  • Diverse, representative data and testing with unexpected inputs (red teaming).
  • Human-centered design: build around the people who use the system.
  • Legal risks: intellectual property claims, biased outcomes, loss of customer trust and hallucinated facts.
  • Environmental impact: choose efficient models and right-size resources.

Common traps

  • Guardrails vs IAM. Guardrails control what the model says; IAM controls who can call it.
  • Treating responsible AI as one-time. It needs ongoing monitoring.

Try the 5 practice questions

A bank's customer chatbot must never give personal investment advice, even when a customer asks for it directly.

The developers want a rule set once in Amazon Bedrock that applies to every response, however the question is phrased.

Which Amazon Bedrock Guardrails feature should they use?

Choose one answer.

  1. A. Denied topics, which block a subject the developers describe in plain language, such as personal investment advice.
  2. B. Word filters, which block exact matches of words and phrases from a custom list the developers maintain.
  3. C. Sensitive information filters, which detect and mask personal data such as account numbers in prompts and responses.
  4. D. Contextual grounding check, which tests whether each answer is supported by a source and relevant to the question.
Show the answer and explanation

Answer: A

  • A. Right: Correct. A denied topic is a subject the chatbot must avoid. Guardrails blocks responses on that subject however the question is worded. Learn more: Create your guardrail - Amazon Bedrock (opens in a new tab)
  • B. Wrong: Word filters match exact words, so a customer who asks for advice in different words would still get a reply. They do not understand the topic.
  • C. Wrong: Sensitive information filters protect personal data. They do not stop the chatbot from giving investment advice.
  • D. Wrong: A grounding check looks at whether an answer is supported by source material. It does not block a whole subject like investment advice.

Explanation

Amazon Bedrock Guardrails has several policy types, and each handles a different risk. Denied topics lets a bank define a subject the assistant must not discuss, which is the requirement here. This question tests matching a requirement to the right guardrail policy.

Study

A utility company is about to launch a billing assistant.

Customers will type quickly, misspell words and sometimes try to trick the assistant into revealing other customers' data or ignoring its rules. The team must show that the assistant holds up under these inputs before launch.

Which testing approach fits BEST?

Choose one answer.

  1. A. Adversarial testing with difficult prompts, including misspellings and manipulation attempts, logging each failure.
  2. B. Accuracy testing on the standard FAQ answers, using the same clean, well-formed wording the assistant was built and tuned with.
  3. C. A load test sending thousands of simple, well-formed billing questions per minute to measure response times and errors.
  4. D. A customer satisfaction survey run after launch, with changes to the assistant's wording made from the feedback customers return.
Show the answer and explanation

Answer: A

  • A. Right: Correct. Testing with misspellings and manipulation attempts checks robustness and safety before customers see the assistant. Each failure gives the team something concrete to fix. Learn more: Prompt injection security - Amazon Bedrock (opens in a new tab)
  • B. Wrong: Clean wording only tests the easy cases. The assistant could still fail when customers misspell words or try to manipulate it.
  • C. Wrong: Load testing checks capacity and speed. It says nothing about how the assistant handles tricky or misleading inputs.
  • D. Wrong: A survey only collects feedback after launch. It cannot show that the assistant holds up before customers use it, so it does not meet a pre-launch requirement.

Explanation

Responsible AI practice includes testing a model against unexpected and adversarial inputs, because real users will not always write clean questions. Robustness testing before launch finds weak points while they are still cheap to fix. This question tests choosing a testing method that matches the risk.

Study

Question 3

Medium · choose 2 ·Link to this question (question 3)

A company with a net zero target runs a high-volume document classification workload on AWS.

It uses the largest available model on an endpoint that runs all day, although traffic is heavy only during office hours.

Which TWO changes BEST reduce energy use while keeping the required accuracy? (Choose two.)

Choose two answers.

  1. A. Move to a smaller model that meets the agreed accuracy target on a test set of the company's own documents.
  2. B. Keep the largest model, because a bigger model reduces the need to check results later.
  3. C. Stop or scale down the endpoint outside office hours, so that capacity does not sit idle overnight.
  4. D. Duplicate the always-on endpoint in a second Region, so that classification continues if one Region fails.
  5. E. Store every version of every scanned document in S3 Standard indefinitely, so that no file is ever lost.
Show the answer and explanation

Answers: A, C

  • A. Right: Correct. Right-sizing uses the least compute that meets the requirement, and a smaller model that passes the accuracy test uses less energy for each document.
  • B. Wrong: A larger model uses more compute for every document. It does not reduce energy use and works against the net zero goal.
  • C. Right: Correct. Idle resources still draw power, so reducing capacity outside office hours cuts energy use without changing the work the workload completes. Learn more: Design principles for sustainability in the cloud (opens in a new tab)
  • D. Wrong: A second always-on endpoint doubles idle capacity and adds energy use. It improves resilience but does not reduce the workload's footprint.
  • E. Wrong: Keeping every version forever raises storage energy and cost with no need from the workload. Retention should follow the business rule, not an open-ended default.

Explanation

The Sustainability Pillar of the Well-Architected Framework asks teams to right-size workloads and to eliminate idle resources, since both reduce the energy needed. A smaller model that still meets accuracy and reduced capacity outside office hours apply those two principles to an AI workload. This question tests applying them to a model choice and an endpoint schedule.

Study

A toy company uses an image model to design cereal-box packaging.

One generated picture closely resembles a cartoon character owned by another company, and the company plans to print it.

Which legal risk is MOST directly raised by printing this image?

Choose one answer.

  1. A. Trademark or copyright infringement claims from the character's owner over the close resemblance.
  2. B. A personal data breach, because the generated image may contain faces of real customers.
  3. C. Discrimination claims from customers who feel the packaging design excludes people in their group.
  4. D. Defamation claims from the character's creator, because the picture makes false statements about them.
Show the answer and explanation

Answer: A

  • A. Right: Correct. Printing an image that copies a protected character can infringe the owner's trademark or copyright, so the owner could bring a claim against the toy company.
  • B. Wrong: A personal data breach needs personal information to be exposed or misused. A generated cartoon does not raise that risk, since the question concerns the picture's resemblance to a character.
  • C. Wrong: Discrimination claims depend on unfair treatment of people in a protected group. A packaging design that resembles a character does not raise this risk.
  • D. Wrong: Defamation requires a false statement that harms a person's reputation. A picture that resembles a character does not make any such statement.

Explanation

Generated images can resemble existing protected works, which creates intellectual property risk for any business that publishes them. Reviewing outputs for resemblance to known marks and getting legal advice before printing are common controls. This question tests recognizing which risk a generated image creates.

Study

A council is designing a benefits advice chatbot.

Many residents are elderly or not confident online, and some need help in a second language. Benefit decisions can affect rent and food for a household.

Which design choice BEST reflects human-centered design for this service?

Choose one answer.

  1. A. Plain-language answers, with a clear and always-visible option to reach a human advisor by phone or in person.
  2. B. Detailed legal answers with citations to every regulation, so that residents can check the rules themselves.
  3. C. Hide the human-advisor option until a resident has tried the chatbot three times, to reduce call volume.
  4. D. A fast chatbot that answers in English only, with identical wording for every resident, to keep running costs low.
Show the answer and explanation

Answer: A

  • A. Right: Correct. Plain language and an easy route to a person suit residents who may struggle online or in a second language. A human route matters when decisions affect rent and food.
  • B. Wrong: Citations help professionals, but dense legal text is hard for many residents to read. It can overwhelm people who need help, and they may give up.
  • C. Wrong: Hiding human help to cut calls blocks the residents who most need it. It treats the service as a cost to control rather than a need to meet.
  • D. Wrong: English-only answers leave out residents who need another language. Low cost does not justify excluding them from a public service.

Explanation

Human-centered design starts from the needs of the people who use a service, including those with limited digital skills and language needs. It also gives clear routes to a person when the stakes are high. This question tests applying that principle to a public-facing AI service.

Study

Want more on Responsible AI and guardrails? The 5 full-length practice sets have 21 more Responsible AI and guardrails questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets

Study Responsible AI and guardrails

More Guidelines for Responsible AI topics