AWS Certified Generative AI Developer – Professional
AIP-C01
The AWS Certified Generative AI Developer – Professional (AIP-C01) exam tests your ability to build and deploy generative AI applications on AWS. It is designed for developers specializing in AI technologies.
What happens when you assign an IAM policy that grants full access to a resource but deny permissions in an explicit deny policy?
AAccess granted to the resource
BAccess denied to the resource
CAccess depending on condition keys
DAccess only allowed for specific users
Explanation
An explicit deny always overrides any allow permissions in AWS IAM.
Q292
Which service enables users to analyze images for automation?
AAmazon Rekognition
BAmazon ECS
CAWS Lambda
DAmazon RDS
Explanation
Amazon Rekognition is designed for image analysis, unlike the others.
Q293
A company needs to securely store API keys. What is the best AWS service for this?
AAWS Secrets Manager
BAmazon S3
CAWS CloudFormation
DAWS Elastic Beanstalk
Explanation
AWS Secrets Manager is specifically designed for secret management.
Q294
You are configuring an Auto Scaling group. What happens if desired capacity exceeds maximum size?
AScaling policies ignore requests
BAutomatically scales to max size
CHealth checks fail
DNo action taken
Explanation
Auto Scaling can only scale up to its maximum set limit.
Q295
Which AWS service provides real-time stream processing?
AAmazon Kinesis
BAWS Lambda
CAmazon S3
DAmazon RDS
Explanation
Amazon Kinesis is designed for real-time data streams, while others cater to different needs such as event handling, storage, or databases.
Q296
A company needs to run machine learning models at scale without managing the infrastructure. Which AWS service should they choose?
AAWS Glue
BAmazon SageMaker
CAWS Batch
DAmazon EC2
Explanation
Amazon SageMaker enables developers to build and train ML models with minimal infrastructure management, unlike the other options.
Q297
You are configuring an IAM policy with a condition. What will happen if the required condition key is not met?
AAccess is granted anyway
BAccess is explicitly denied
CAccess is logged for auditing
DAccess request times out
Explanation
IAM policies deny access if conditions are not met, while the other options incorrectly describe the policy behavior.
Q298
Which service provides an easy way to manage machine learning models in AWS?
AAmazon SageMaker
BAWS Lambda
CAmazon RDS
DAmazon EC2
Explanation
Amazon SageMaker is specifically built for machine learning model management, whereas the other services focus on different tasks.
Q299
A company needs to enforce multi-factor authentication (MFA) for all IAM users. What's the best way to achieve this?
ACreate a policy for IAM roles.
BEnable MFA in AWS Organizations.
CAttach an MFA requirement to IAM users.
DUse AWS Config rules.
Explanation
Attaching an MFA requirement directly to IAM users mandates MFA enforcement effectively compared to the other options.
Q300
What happens when you configure an Amazon S3 bucket with the 'public-read' ACL?
APublic can upload files.
BAnyone can read objects.
CBucket listing is public.
DAccess is fully restricted.
Explanation
The 'public-read' ACL allows public read access to the objects in the bucket, not upload permissions.