SaveMyCert
Log in
5 of 5 free questions left today·for 10 a day
AIP-C01 practice

Free AIP-C01 practice questions

Drill exam-realistic AWS Certified Generative AI Developer – Professional (AIP-C01) questions by domain, with an explanation on every option — not just the right one. 5 fully worked examples are further down this page, answers included.

Question bank
841
across 5 domains
Free, no account
5/day
a free account allows 10 a day
Real exam
75 Qs
180 min · pass 750 / 1000
Explanations
Every option
right and wrong

Build a practice session

5 free questions left today.

Domains

How many?

Mode

Ready when you are

10 fresh questions drawn across all domains, in Learn mode.

Review what you missed

Every question you answer incorrectly, and every question you flag while practising, is saved here automatically. Finish a session and you can come back to re-drill just those.

5 sample AIP-C01 questions, fully explained

Real questions from the AIP-C01 bank, with the answer key and the reasoning behind every option. Read them, then go back up the page and try the rest.

Question 1Foundation Model Integration, Data Management, and Compliance

A legal operations team uses a general-purpose text model in Amazon Bedrock to summarize contracts. The model already understands the contracts well, but each summary comes back in a different layout. The team needs every summary to follow the same five headings in the same order. They have no labeled training data and want the change live this week with the least effort. What should the developer do?

Choose one.

  • a
    Add the five headings and one example summary to the prompt template sent with each request Correct

    The model already understands the content; only the layout varies. Format instructions plus a one-shot example in the prompt fix layout immediately, with no data preparation or training job.

  • b
    Fine-tune the model on a set of contracts paired with summaries written under the five headings

    Fine-tuning can teach a format, but it needs a labeled dataset the team does not have and a training job, which is far more effort than the problem needs.

  • c
    Run continued pre-training on the contract archive so the model learns the firm's own layout

    Continued pre-training uses unlabeled text to deepen domain knowledge. It does not teach an output structure, and it is the most expensive customization option.

  • d
    Store the five headings in a knowledge base and retrieve them with each contract as added context

    Retrieval supplies facts the model lacks. The headings are fixed and short, so a retrieval pipeline adds moving parts for something the prompt template carries directly.

The concept

Choosing the lightest technique that meets the requirement: prompt engineering before retrieval or model customization.

Why that’s the answer

The model's knowledge is already adequate; the gap is output structure. Structure is controlled most cheaply by the prompt: explicit headings and an example response. Fine-tuning also works but needs labeled pairs and a training job, continued pre-training changes knowledge rather than format, and retrieval exists to inject information the model does not have, not to impose a fixed layout.

How to reason it out
  1. Name the gap: knowledge, freshness, or behaviour/format.
  2. For a format gap with a capable model, try prompt instructions and examples first.
  3. Reserve fine-tuning for when prompting cannot hold the behaviour and labeled data exists.
  4. Use retrieval only when the model lacks information.

Exam tip: Fix format with the prompt first; customize the model only when prompting cannot hold the behaviour.

AIP-C01 GenAI Solution Design: Architecture, Proofs of Concept and Standards — the lesson that teaches this.

Question 2Implementation and Integration

A retailer runs a Strands Agents shopping assistant in containers on Amazon ECS behind an Application Load Balancer, with no sticky sessions. Customers complain that the assistant forgets what they said a minute earlier, because each follow-up request can land on a different task. The team wants each conversation's messages and agent state restored on whichever task receives the next request. What should the developer configure?

Choose one.

  • a
    Attach a session manager backed by the local file system to the agent, keyed by the conversation's session ID

    File-based sessions live on one task's disk. A request routed to another task finds no saved session.

  • b
    Replace the default conversation manager with a sliding window manager that keeps a larger number of messages

    Conversation managers only decide how much in-memory history is sent to the model; they do not persist anything across tasks.

  • c
    Replace the default conversation manager with a summarizing manager that condenses older messages into a summary

    Summarising trims context inside one agent object. The summary is still lost when the next request reaches a different task.

  • d
    Attach a session manager backed by an Amazon S3 bucket to the agent, keyed by the conversation's session ID Correct

    An S3-backed Strands session manager persists messages and agent state outside the container, so any task can restore the session by its ID.

The concept

Strands separates persistence (session managers) from context-window management (conversation managers).

Why that’s the answer

The failure is a lost session across horizontally scaled tasks, so state must be stored somewhere every task can read. A session manager backed by S3 saves the messages and agent state per session ID and restores them on any task. A file-system session manager only works when every request hits the same host, and both conversation managers shape the in-memory context without persisting it.

How to reason it out
  1. Notice that requests for one conversation reach different containers.
  2. Recognise that the agent's state must live outside the container.
  3. Pick the Strands component that persists sessions: a session manager with shared storage.
  4. Reject conversation managers, which only trim or summarise context in memory.

Exam tip: Session managers persist an agent's state; conversation managers only manage what fits in the context window.

AIP-C01 Agentic AI: Multi-Agent Systems, Safeguards, Human Review and MCP Tools — the lesson that teaches this.

Question 3AI Safety, Security, and Governance

A retail company runs a customer chatbot that calls Amazon Bedrock through the Converse API. Some users submit hateful or sexually explicit messages. The company wants those messages stopped before the model processes them and a fixed polite reply returned instead. The team does not want to build, train or host any classification logic of its own. Which solution meets these requirements with the LEAST operational overhead?

Choose one.

  • a
    Call Amazon Comprehend DetectToxicContent from a Lambda function before each Converse request and return a fixed reply above a set score

    This works, but the team writes and maintains the threshold logic and the extra Lambda hop. A guardrail does the same job as configuration.

  • b
    Add system prompt instructions that tell the model to refuse hateful or sexual requests and answer with a fixed polite message

    The message still reaches the model, and instruction-following is not a reliable control; a determined user can talk the model out of it.

  • c
    Train an Amazon SageMaker AI text classifier on labelled chat logs and call its endpoint ahead of each Converse request

    A custom classifier means labelling data, training and hosting an endpoint, which the company explicitly wants to avoid.

  • d
    Configure a Bedrock guardrail with hate and sexual content filters for prompts and a blocked message, then reference it in Converse Correct

    Guardrail content filters evaluate the prompt before the model is invoked, and a blocked prompt returns the configured message. Nothing to train or host.

The concept

Amazon Bedrock Guardrails content filters (hate, insults, sexual, violence, misconduct, prompt attack) can be applied to user prompts and model responses with configurable strength.

Why that’s the answer

A guardrail passed in guardrailConfig evaluates the input first; if a filter blocks it, the model is not invoked and the blocked-prompt message is returned (stopReason guardrail_intervened). It is managed configuration, so it beats a Comprehend-plus-Lambda pipeline or a custom classifier on overhead, and unlike a system prompt it does not depend on the model choosing to comply.

How to reason it out
  1. Identify the need: stop harmful input before the model, with a fixed reply.
  2. Note the constraint: no classification logic to build or host.
  3. Match it to a managed input control on the Bedrock call itself.
  4. Reject options that add code, training, or rely on the model's cooperation.

Exam tip: Harmful-input blocking with a canned reply and no custom code = a Bedrock guardrail content filter on prompts.

AIP-C01 Input and Output Safety: Bedrock Guardrails, Prompt Injection Defence and Hallucination Checks — the lesson that teaches this.

Question 4Operational Efficiency and Optimization for GenAI Applications

A SaaS company offers a document-drafting feature to 40 enterprise tenants. Every tenant's request passes through one AWS Lambda function, running under one execution role, that calls the Amazon Bedrock Converse API with the same model. Finance needs each tenant's monthly model spend to appear separately in AWS Cost Explorer. Support engineers also need to find a given tenant's individual requests, with prompts and responses, when the tenant disputes its usage. The company will not create per-tenant roles or accounts. Which TWO actions meet these requirements? (Select TWO.)

Choose TWO.

  • a
    Create a tagged application inference profile per tenant and pass its ARN as the modelId Correct

    Application inference profiles carry cost allocation tags. Invoking through each tenant's profile splits Bedrock spend by tenant in Cost Explorer once the tags are activated, with no extra roles or accounts.

  • b
    Pass the tenant ID in requestMetadata on each call and enable model invocation logging Correct

    requestMetadata key-value pairs are written to the invocation logs and can be used to filter them, so engineers can pull one tenant's requests with full prompts and responses.

  • c
    Publish the token counts from each model response as a CloudWatch metric per tenant

    A custom metric gives per-tenant token totals, but it is not spend in Cost Explorer and it holds no prompts or responses for a dispute.

  • d
    Create a tenant tag on the shared Lambda function and activate it as a cost allocation tag

    There is one function for all tenants, so a tag on it cannot split spend by tenant, and Bedrock charges are not attributed to the caller's Lambda tags.

  • e
    Turn on CloudTrail data events for Bedrock and filter each call record by tenant

    CloudTrail records who called the API, but every call comes from the same role and the records do not contain prompts, responses or a tenant field.

The concept

Token tracking and cost attribution: Bedrock costs can be split with tagged application inference profiles, and individual requests can be found through invocation logs filtered on requestMetadata.

Why that’s the answer

Two different needs are stated. Spend in Cost Explorer needs a billable resource that carries a cost allocation tag: an application inference profile per tenant, used as the modelId, does that without new roles or accounts. Request-level evidence needs the full prompt and response: model invocation logging captures them, and requestMetadata (up to 16 key-value pairs per request) adds the tenant ID so the logs can be filtered. CloudWatch token metrics are not spend, the shared Lambda tag cannot separate tenants, and CloudTrail holds neither tenant nor content.

How to reason it out
  1. Split the requirements: billing attribution and request-level forensics.
  2. For billing, find a Bedrock resource that can carry a per-tenant cost allocation tag.
  3. For forensics, find a log that stores prompts and responses and can be filtered per tenant.
  4. Reject options that give token counts, shared tags or API-call records without content.

Exam tip: Per-tenant Bedrock spend: tagged application inference profiles. Per-tenant request lookup: invocation logs plus requestMetadata.

AIP-C01 GenAI Cost Optimization: Token Efficiency, Model Selection, Throughput and Caching on Amazon Bedrock — the lesson that teaches this.

Question 5Testing, Validation, and Troubleshooting

A company's IT help assistant on Amazon Bedrock is tested nightly against 400 questions with reference answers written by senior engineers. The test counts an answer as correct only when it matches the reference after normalizing case and punctuation. Reviewers find that most failures are correct answers worded differently from the reference. The team wants a score that credits answers with the same meaning. Which scoring approach should the test use?

Choose one.

  • a
    Score each answer by ROUGE-1 unigram overlap with its approved reference answer

    ROUGE-1 counts shared words. A correct answer that uses different vocabulary still scores low, which is the same problem in a softer form.

  • b
    Score each answer by exact match after also removing English stop words

    Removing stop words still requires the remaining words to match, so paraphrased correct answers keep failing.

  • c
    Score each answer by the generating model's perplexity on its own answer

    Perplexity reflects how predictable the text is to a language model. It says nothing about whether the answer agrees with the reference.

  • d
    Score each answer by BERTScore semantic similarity to its reference answer Correct

    BERTScore compares contextual embeddings of the answer and the reference, so a correct paraphrase scores high while a different meaning scores low. It is the semantic accuracy metric Bedrock itself reports for summarization.

The concept

Open-ended FM output can be correct in many wordings, so lexical metrics (exact match, n-gram overlap) under-score it. Semantic metrics compare meaning.

Why that’s the answer

The failures are paraphrases, so the score must compare meaning rather than tokens. BERTScore embeds both texts with a transformer and matches them token by token in embedding space, which credits synonyms and reworded sentences. ROUGE and exact match both depend on shared surface words, and perplexity measures fluency-like predictability with no reference at all.

How to reason it out
  1. Note the symptom: correct answers fail because the wording differs.
  2. Rule out metrics that compare surface tokens (exact match, ROUGE).
  3. Rule out reference-free fluency signals such as perplexity.
  4. Choose an embedding-based similarity to the reference.

Exam tip: Paraphrase-tolerant accuracy needs a semantic metric such as BERTScore, not word overlap.

AIP-C01 GenAI Evaluation: Output Quality Metrics, Bedrock Evaluations, A/B and Canary Testing, Quality Gates — the lesson that teaches this.

The AIP-C01 question bank, by domain

The bank is built to the exam's own weighting, so the practice you get reflects the marks that are actually on offer — not whichever domain was easiest to write questions for.

Published AIP-C01 practice questions per exam domain
DomainExam weightTopicsQuestions
Foundation Model Integration, Data Management, and Compliance31%6258
Implementation and Integration26%5220
AI Safety, Security, and Governance20%4168
Operational Efficiency and Optimization for GenAI Applications12%3102
Testing, Validation, and Troubleshooting11%393
Total100%21841

Practise AIP-C01 one domain at a time

How AIP-C01 questions are worded

Most AIP-C01 questions are not asking whether you can recall a definition. They describe a situation and ask which option satisfies it — so the skill being tested is reading the requirement precisely and eliminating options that fail it.

Single-response vs multiple-response

A single-response question has exactly one right answer. A multiple-response question tells you how many to pick ("Choose TWO") and there is no partial credit — getting one of the two right scores nothing. Read that instruction before you read the options.

Read the last line first

The final sentence is the actual question; everything before it is scenario. Read it first, then read the scenario knowing what you are looking for. It stops you from building an answer in your head that the question never asked for.

Hunt for the qualifier

Most scenarios turn on one word — MOST cost-effective, LEAST operational overhead, with the LEAST latency, without changing application code. Two options are frequently both technically correct, and the qualifier is the only thing separating them.

Eliminate, then choose

Distractors are almost always real AWS services doing a real job — just not this job. Rule out the ones that break a stated constraint before you compare what's left. On a question you truly don't know, eliminating two options turns a guess into a coin flip.

Practise AIP-C01 from your browser

The SaveMyCert Chrome extension opens a daily drill of 5 AIP-C01 questions in the side panel, with the full explanation behind every answer. No account needed.

Get the Chrome extension (opens in a new tab)

Beyond AIP-C01 practice

AIP-C01 practice questions: your questions

Yes. You can answer 5 questions a day with no account at all, and a free account raises that to 10 a day across the full 841-question AIP-C01 bank, with an explanation on every option. Pro removes the daily cap entirely.