AIP-C01 Domain 4: Security, Testing, and Governance for GenAI Applications

During peak traffic, the platform team must encrypt prompts/responses at rest in logs. What should they do FIRST? encrypt prompts/responses at rest in logs.

Multiple choice — select one answer

Answer choices

  1. a. Amazon Bedrock Guardrails
  2. b. Structured adversarial testing
  3. c. Data masking and policy on PII
  4. d. KMS for CloudWatch Logs and S3

Architectural breakdown & explanation

Encryption protects logged interactions.

Correct answer(s): d. KMS for CloudWatch Logs and S3

Exam domain: Domain 4: Security, Testing, and Governance for GenAI Applications (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Generative AI Developer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.