AIP-C01 practice question 7 of 15

A financial services company is developing a customer service AI assistant by using Amazon Bedrock. The AI assistant must not discuss investment…

Full set: 127 questions
A financial services company is developing a customer service AI assistant by using Amazon Bedrock. The AI assistant must not discuss investment advice with users. The AI assistant must block harmful content, mask personally identifiable information (PII), and maintain audit trails for compliance reporting. The AI assistant must apply content filtering to both user inputs and model responses based on content sensitivity. The company requires an Amazon Bedrock guardrail configuration that will effectively enforce policies with minimal false positives. The solution must provide multiple handling strategies for multiple types of sensitive content. Which solution will meet these requirements?
Answer options
A: Configure a single guardrail and set content filters to high for all categories. Set up denied topics for investment advice and include sample phrases to block. Set up sensitive information filters that apply the block action for all PII entities. Apply the guardrail to all model inference calls.
B: Configure multiple guardrails by using tiered policies. Create one guardrail and set content filters to high. Configure the guardrail to block PII for public interactions. Configure a second guardrail and set content filters to medium. Configure the second guardrail to mask PII for internal use. Configure multiple topic-specific guardrails to block investment advice and set up contextual grounding checks.
C: Configure a guardrail and set content filters to medium for harmful content. Set up denied topics for investment advice and include clear definitions and sample phrases to block. Configure sensitive information filters to mask PII in responses and to block financial information in inputs. Enable both input and output evaluations that use custom blocked messages for audits. Correct answer
D: Create a separate guardrail for each use case. Create one guardrail that applies a harmful content filter. Create a guardrail to apply topic filters for investment advice. Create a guardrail to apply sensitive information filters to block PII. Use AWS Step Functions to chain the guardrails sequentially.
Correct Answer:
C. Configure a guardrail and set content filters to medium for harmful content. Set up denied topics for investment advice and include clear definitions and sample phrases to block. Configure sensitive information filters to mask PII in responses and to block financial information in inputs. Enable both input and output evaluations that use custom blocked messages for audits.
Explanation

This solution represents a well-configured and balanced guardrail policy. Setting content filters to "medium" effectively blocks harmful content while minimizing false positives. Defining "denied topics" with specific phrases is the correct method to prevent discussions on investment advice. The configuration uses multiple handling strategies by masking PII in responses while blocking sensitive financial information in user inputs, which meets a key requirement. Enabling evaluation for both inputs and outputs ensures comprehensive protection. This nuanced approach correctly uses the features of Amazon Bedrock Guardrails to enforce all specified policies effectively.

Why Incorrect

A. Setting all filters to "high" and blocking all PII is too aggressive, leading to high false positives and a poor user experience.
B. Amazon Bedrock does not support applying or chaining multiple guardrails to a single inference call; a single, comprehensive guardrail should be used.
D. This architecture is invalid. Chaining guardrails with Step Functions is not a supported pattern and would be highly inefficient and complex.

References

1. Amazon Bedrock User Guide

"Guardrails for Amazon Bedrock". This documentation details the configuration of all policies mentioned in option C.

2. Amazon Bedrock User Guide

"Configure policies in a guardrail". This section shows how to set up Content filters (with levels like MEDIUM)

Denied topics

and Sensitive information filters.

3. Amazon Bedrock User Guide

"Sensitive information filter". This page explicitly describes the different actions available

such as BLOCK and MASK ("Anonymize PII entities by replacing them with a placeholder")

confirming that multiple handling strategies are a native feature.

Scroll to Top