AIP-C01 Domain 4: Security, Testing, and Governance for GenAI Applications

Which service should you use to encrypt prompts/responses at rest in logs?

Multiple choice — select one answer

Answer choices

  1. a. KMS for CloudWatch Logs and S3
  2. b. Bedrock Regions and VPC endpoints
  3. c. Automated evaluation datasets in pipeline
  4. d. Amazon Bedrock Guardrails

Architectural breakdown & explanation

Encryption protects logged interactions.

Correct answer(s): a. KMS for CloudWatch Logs and S3

Exam domain: Domain 4: Security, Testing, and Governance for GenAI Applications (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Generative AI Developer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.