2.3Standard
Send system policy, history, and the current question to a chat API.
Keep trusted and untrusted content distinct.
Choose two appropriate designs.
× Incorrect
Place purpose and safety constraints in a trusted system message and validate user messages as untrusted input; other controls remain necessary.
Detailed explanation
IncorrectPut secret system instructions in a user message
This exposes protected information.
CorrectValidate and limit user messages as untrusted input
User text should not override system policy.
IncorrectRoles remove the need for authorization or output validation
Roles are only part of defense in depth.
CorrectPut purpose, safety policy, and output constraints in the system message
The application controls trusted instructions.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 2.3のプロンプト役割と安全な入力処理を確認する。
Official references
What to confirm
システム方針とユーザー入力を異なる信頼境界として扱える。
Key points
- System
- User
- Trust boundary
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
System message
Application-managed instructions describing purpose, role, constraints, and safety policy.
User message
A request or data supplied by a user and treated as untrusted input.
Question IDAWS-AIF-160
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue