Amazon Web Services Updated AIF-C01 Exam Questions and Answers by cairo

To securely use large language models (LLMs) on Amazon Bedrock, companies should design clear and specific prompts to avoid unintended outputs and ensure proper configuration of AWS Identity and Access Management (IAM) roles and policies with the principle of least privilege. This approach limits access to sensitive resources and minimizes the potential impact of security incidents.

Option A (Correct): "Design clear and specific prompts. Configure AWS Identity and Access Management (IAM) roles and policies by using least privilege access": This is the correct answer as it directly addresses both security practices in prompt design and access management.

Option B: "Enable AWS Audit Manager for automatic model evaluation jobs" is incorrect because Audit Manager is for compliance and auditing, not directly related to secure LLM usage.

Option C: "Enable Amazon Bedrock automatic model evaluation jobs" is incorrect because Bedrock does not provide automatic model evaluation jobs specifically for security purposes.

Option D: "Use Amazon CloudWatch Logs to make models explainable and to monitor for bias" is incorrect because CloudWatch Logs are used for monitoring and not directly for making models explainable or secure.

AWS AI Practitioner References:

Secure AI Practices on AWS: AWS recommends configuring IAM roles and using least privilege access to ensure secure usage of AI models.

AWS HealthScribe provides speech-to-text and medical documentation generation, specifically designed for healthcare applications.

Amazon Polly is text-to-speech, not speech-to-text.

Amazon Rekognition is computer vision.

Amazon Q Developer is a generative AI assistant for developers, not healthcare.

???? Reference:

AWS Documentation – AWS HealthScribe

BERT-based models (Bidirectional Encoder Representations from Transformers) are suitable for tasks that involve understanding the context of words in a sentence and suggesting missing words. These models use bidirectional training, which considers the context from both directions (left and right of the missing word) to predict the appropriate word to fill in the gaps.

BERT-based Models:

BERT is a pre-trained transformer model designed for natural language understanding tasks, including text completion, where certain words are missing.

It excels at understanding context and relationships between words in a sentence, making it ideal for suggesting potential words to fill in missing text.

Why Option D is Correct:

Contextual Understanding: BERT uses its bidirectional training to understand the context around missing words, making it highly accurate in suggesting suitable replacements.

Text Completion Capability: BERT's architecture is explicitly designed for tasks like masked language modeling, where certain words in a text are masked (or missing), and the model predicts the missing words.

Why Other Options are Incorrect:

A. Topic modeling: Focuses on identifying topics in a text corpus, not on predicting missing words.

B. Clustering models: Group similar data points together, which is not suitable for predicting missing text.

C. Prescriptive ML models: Focus on providing recommendations based on data analysis, not on natural language processing tasks like filling in missing text.

Jailbreaking an LLM refers to deliberately crafting prompts to bypass its safety guardrails and produce restricted or harmful content.

Fuzzing is input testing for software.

DoS is a service availability attack.

Pen testing (C) is allowed with AWS authorization but doesn’t describe bypassing model safeguards.

???? Reference:

AWS Responsible AI – Prompt Injection and Jailbreak Risks