AIF-C01 Practice Question 10: Chatbot Safeguards PII

AWS Certified AI Practitioner (AIF-C01) · Test 1 · question 10 of 10

Security, Compliance, and Governance for AI Solutionseasy

Which AWS capability should a bank use to stop its Amazon Bedrock customer chatbot from giving investment advice, and to mask account numbers and other personal data in both user messages and model responses?

Show answer and explanation

Answer:

A. Amazon Bedrock Guardrails, configured with a denied topic and sensitive information filters

Amazon Bedrock Guardrails evaluates both user inputs and model responses at inference time. A denied topic blocks subjects that are off-limits for the application, such as investment advice. Sensitive information filters block or mask personally identifiable information (PII) and custom patterns, such as account numbers. Guardrails also offers content filters for harmful content and prompt attacks, and contextual grounding checks for hallucinations (option A).

- B is wrong because Amazon Macie discovers sensitive data stored in Amazon S3. It doesn't filter live chatbot conversations or block topics. - C is wrong because AWS KMS protects data with encryption. Encryption doesn't stop the model from giving advice, and it doesn't mask PII in the text a user sees. - D is wrong because AWS CloudTrail records API activity for auditing. It logs what happened but doesn't block or redact anything.

Reference: Detect and filter harmful content by using Amazon Bedrock Guardrails

Practice Test 1 ›

Study guides for AIF-C01

AI engineer roadmap 2026: skills, certs and the orderAI engineer roadmap for 2026: skills to learn in order, AI engineer vs ML engineer, which certifications fit each stage, and what to skip.

How AI Is Changing Software Jobs: Where to PrepareHow AI is changing software jobs: what history shows, the evidence on junior developers, what Klarna learned, new AI roles and five domains to prepare for.

How AWS Certification Exams Work: Scoring and RenewalHow AWS certification exams work: levels, booking, question types, unscored questions, scaled scores, pass marks, validity and how recertification works.

What Is Amazon Bedrock? Models, Pricing and GuardrailsWhat is Amazon Bedrock? How a request reaches a model, what happens to your data, token pricing, Guardrails, Knowledge Bases, AgentCore and the exam traps.

Google Cloud Generative AI Leader vs AWS AI PractitionerGoogle Cloud Generative AI Leader vs AWS AI Practitioner: format, cost, topics, free preparation and which certification to take first.

AWS certification cost in 2026, and free ways to prepareWhat every AWS certification costs in 2026 in USD and INR, retake and reschedule rules, the 50% voucher, and the free official ways to prepare.

AWS Generative AI Developer Professional (AIP-C01) guideWhat the AWS Certified Generative AI Developer – Professional (AIP-C01) exam covers - format, cost, the five domains, the services, and how to prepare.

Best AI certifications 2026: AWS, Google, Microsoft, ClaudeThe best AI certifications in 2026 from AWS, Google, Microsoft, Claude and Databricks, by level, with price, status and which one to take first.

Which AWS certification should you get? 2026 roadmapWhich AWS certification to get first, by role and experience, with each exam's status in October 2026, what is changing, and prices in USD and INR.

What Is RAG? How Retrieval-Augmented Generation WorksWhat RAG is and how it works: chunking, embeddings, vector search, hybrid search, reranking, GraphRAG and agentic RAG on AWS, Google and Azure.

Prompt engineering vs RAG vs fine-tuningWhen to use prompt engineering, retrieval-augmented generation, fine-tuning or continued pre-training, compared on cost, freshness, hallucination and privacy.