AIP-C01 practice question: Filtering harmful input (Bedrock Guardrails content filters and denied topics) (2 of 2)
AI Safety, Security, and Governance A free question from our original AIP-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.
A freight forwarder runs a shipment exception assistant on a self-hosted open-weight model. The model is deployed on a SageMaker AI real-time endpoint in the company's account, because the operations team fine-tuned it on internal incident reports and other systems call that endpoint directly.
Dispatchers type free-text questions that may include customer personal data, or attempts to make the model reveal internal information. The company wants the same content safety checks it uses with other models, applied in real time, but it cannot move the model into Amazon Bedrock.
The checks must screen what goes to the model and what comes back, and a blocked request must never reach the endpoint.
Which TWO actions meet these requirements? (Choose two.)
Choose two answers.
AA. Run a nightly job that calls ApplyGuardrail on the previous day's logged prompts and sends a report to the operations manager, so that unsafe prompts are found and reviewed the next morning.
BB. Call ApplyGuardrail with the INPUT source on each dispatcher question before invoking the endpoint, and stop the request when the response shows that the guardrail intervened.
CC. Copy the guardrail's denied topics into the system prompt of the self-hosted model, so that the model is instructed to refuse those topics when it answers dispatchers.
DD. Import the model into Amazon Bedrock with Custom model import, attach the guardrail to the Converse calls, and point the other systems at the Bedrock endpoint instead of the SageMaker endpoint.
EE. Call ApplyGuardrail with the OUTPUT source on the model's reply before it is returned to the caller, and return the guardrail's output text in place of any reply that it blocks.
C. Wrong: A system prompt asks the model to refuse, but the model may still comply, and the guardrail's sensitive information checks are not reproduced. The option does not screen the endpoint's input or output in real time.
ApplyGuardrail evaluates text against a guardrail without invoking a model, so it can screen both the dispatcher's question before it reaches a self-hosted endpoint and the model's reply before it is returned. A nightly review is too late, a system prompt is not enforced, and moving the model to Bedrock breaks the stated requirement.
Want more on Filtering harmful input (Bedrock Guardrails content filters and denied topics)? The 5 full-length practice sets have 5 more Filtering harmful input (Bedrock Guardrails content filters and denied topics) questions, 375 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets →