This question maps responsible AI principles to specific AI system practices as defined in AWS Responsible AI Guidelines and Amazon Bedrock Responsible AI documentation.

Scenario 1:

Encrypt the application data, and isolate the application on a private network.

→ Principle: Privacy and Security

From AWS documentation:

" Protecting user data through encryption, secure network isolation, and access control aligns with the Responsible AI principle of privacy and security. AWS recommends securing all data used by AI systems, both in transit and at rest, to maintain trust and regulatory compliance. "

Scenario 2:

Evaluate how different population groups will be impacted.

→ Principle: Fairness

From AWS documentation:

" The fairness principle ensures that AI models do not discriminate or generate biased outcomes across population groups. Fairness assessment involves evaluating performance metrics across demographic segments and mitigating any bias detected. "

Scenario 3:

Test the application with unexpected data to ensure the application will work in unique situations.

→ Principle: Robustness

From AWS documentation:

" Robustness refers to an AI system’s ability to maintain reliable performance under varied, noisy, or unexpected input conditions. Testing for robustness helps ensure the model generalizes well and behaves safely in edge cases. "

Referenced AWS AI/ML Documents and Study Guides:

AWS Responsible AI Practices Whitepaper – Core Principles of Responsible AI

Amazon Bedrock Documentation – Responsible AI and Safety Controls

AWS Certified Machine Learning Specialty Guide – AI Governance and Model Evaluation

The correct answer is D – F1 score, which is the harmonic mean of precision and recall. AWS documentation states that the F1 score is the preferred metric when evaluating ML models trained on imbalanced datasets, where one class appears significantly more often than others. Accuracy becomes misleading in these situations because a model can achieve high accuracy simply by predicting the majority class. Precision alone measures correctness of positive predictions, while recall measures completeness—neither fully captures class balancing performance. The F1 score provides a combined measurement that reflects how well the model identifies minority classes while avoiding excessive false positives. AWS’s ML Specialty Guide recommends using F1 for classification tasks where “class distribution is uneven or where both false negatives and false positives matter.” This metric provides a fairer assessment of overall model performance across all class categories.

Referenced AWS Documentation:

AWS Certified Machine Learning Specialty Guide – Metrics for Imbalanced Classes

Amazon SageMaker Developer Guide – Evaluating Classification Models

Amazon Bedrock needs the appropriate IAM role with permission to access and decrypt data stored in Amazon S3. If the data is encrypted with Amazon S3 managed keys (SSE-S3), the role that Amazon Bedrock assumes must have the required permissions to access and decrypt the encrypted data.

Option A (Correct): " Ensure that the role that Amazon Bedrock assumes has permission to decrypt data with the correct encryption key " : This is the correct solution as it ensures that the AI model can access the encrypted data securely without changing the encryption settings or compromising data security.

Option B: " Set the access permissions for the S3 buckets to allow public access " is incorrect because it violates security best practices by exposing sensitive data to the public.

Option C: " Use prompt engineering techniques to tell the model to look for information in Amazon S3 " is incorrect as it does not address the encryption and permission issue.

Option D: " Ensure that the S3 data does not contain sensitive information " is incorrect because it does not solve the access problem related to encryption.

AWS AI Practitioner References:

Managing Access to Encrypted Data in AWS: AWS recommends using proper IAM roles and policies to control access to encrypted data stored in S3.

The company is building a chatbot using an LLM to answer questions about HR policies, with access to a large digital documentation base. Retrieval Augmented Generation (RAG) optimizes the LLM’s responses by retrieving relevant information from the documentation base and using it to generate accurate, contextually grounded answers, reducing hallucinations and improving response quality.

Exact Extract from AWS AI Documents:

From the AWS Bedrock User Guide:

" Retrieval Augmented Generation (RAG) enhances the performance of large language models by retrieving relevant information from external knowledge bases, such as documentation or databases, and incorporating it into the generation process. This technique ensures responses are accurate and grounded in the provided data, making it ideal for applications like policy chatbots. "

(Source: AWS Bedrock User Guide, Retrieval Augmented Generation)

Detailed Explanation:

Option A: Use Retrieval Augmented Generation (RAG).This is the correct answer. RAG leverages the documentation base to provide the LLM with relevant HR policy information, optimizing the chatbot’s responses for accuracy and relevance.

Option B: Use few-shot prompting.Few-shot prompting provides a few examples in the prompt to guide the LLM, but it is less effective than RAG for large documentation bases, as it cannot dynamically retrieve specific policy details.

Option C: Set the temperature to 1.Setting the temperature to 1 controls the randomness of the LLM’s output but does not optimize responses using external documentation. This option is unrelated to the documentation base.

Option D: Decrease the token size.Decreasing token size (likely referring to limiting input/output tokens) may reduce response length but does not optimize the quality of responses using the documentation base.

Comprehensive and Detailed Explanation From Exact AWS AI documents:

To secure data in Amazon Q Business, AWS recommends:

AWS KMS (A) to encrypt data at rest and manage encryption keys.

AWS IAM (E) to control authentication and authorization for users and services.

Together, these services ensure:

Strong access control

Data confidentiality

Compliance with enterprise security requirements

Why the other options are incorrect:

Cross-account access (B) does not inherently ensure privacy.

Amazon Inspector (C) is for vulnerability scanning, not authentication.

Public access (D) violates security best practices.

AWS AI document references:

Amazon Q Business Security Overview

Data Protection with AWS KMS

Access Control with AWS IAM

A prompt template defines how the model is structured and guided (system prompts, roles, guardrails).

An attack that reveals or leaks this prompt template is known as a prompt extraction attack.

The other options (persona switching, exploiting friendliness, ignoring prompts) describe adversarial techniques but do not directly expose the internal configured behavior.

???? Reference:

AWS Responsible AI – Prompt Injection & Extraction Attacks

Diffusion models are state-of-the-art generative models for creating high-quality, realistic images from textual prompts or other forms of conditioning. These are the foundational technology behind tools like Amazon Bedrock Titan Image Generator and other generative image models.

The correct answer is B – Hallucinations. AWS defines hallucinations as instances where a generative model produces confident but incorrect or fabricated information. This can occur when the model lacks relevant context or attempts to fill informational gaps during text generation. In product descriptions, hallucinations may lead to false features, incorrect specifications, or misleading claims—posing reputational and legal risks. AWS documentation recommends mitigating hallucinations through Retrieval-Augmented Generation (RAG), grounding responses in enterprise data using Bedrock Knowledge Bases, implementing Guardrails, or refining prompts with factual constraints. Toxicity (A) refers to harmful or offensive content, interpretability (C) concerns understanding model reasoning, and deterministic outputs (D) are not typical of LLMs. Therefore, the issue described aligns precisely with the definition of hallucination in AWS’s generative AI guidance.

Referenced AWS Documentation:

AWS Generative AI Whitepaper – Hallucination Mitigation

Amazon Bedrock Knowledge Bases – Grounding Model Responses