Applying authorization to retrieval | AWS Certified AI Practitioner (AIF-C01) original practice question

3.1Standard

Department documents share one index.

Hide unauthorized evidence.

Choose two controls.

Hint 1: Focus on the requirement

Identify what must change and what must remain unchanged. Then choose the command whose scope matches that requirement.

Hint 2: Check each command's role

Separate commands that display information, change state, remove data, or affect a child process.

Detailed explanation

CorrectApply user or service permissions to the retrieval filter before candidates are returned

Unauthorized evidence is excluded.

CorrectTest allow and deny cases and recheck permission for citations

Boundaries are verified.

IncorrectRely on a prompt saying not to reveal secrets

The model is not an authorization layer.

IncorrectUse one broad shared identity for every user

Least privilege is violated.

An example you can run in a temporary verification environment.

AWS公式AIF-C01 Domain 3.1・5.2の検索認可、最小権限、監査を確認する。

モデルの指示だけに頼らず、検索・引用・監査の各段階で権限を適用できる。

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDAWS-AIF-442

EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認

Last technical review2026-08-20