The correct selections are Configure Amazon Q Business to use enterprise data only or combine enterprise data with model knowledge and Amazon Q Business guardrails provide topic-level rules that define how the app responds when a blocked topic is mentioned.

Administrators can set Configure Amazon Q Business to use enterprise data only or combine enterprise data with model knowledge as a response-source control so answers come only from your approved enterprise data or from a blend of enterprise data and the model knowledge. This setting helps meet compliance needs by limiting external model provenance when required and by allowing a mixed mode for broader answers during pilot testing.

Amazon Q Business guardrails provide topic-level rules that define how the app responds when a blocked topic is mentioned gives admins the ability to define topic-specific policies that alter behavior when certain subjects are detected. Guardrails can block content or return a controlled response so the application behaves predictably whenever a restricted or sensitive topic appears.

Amazon Q Business can be configured to answer using only the model's built-in knowledge is incorrect because there is not a mode that limits answers to model-only knowledge in isolation. The supported administrative choices are enterprise-only or a combination of enterprise data and model knowledge.

End users can never upload files in chat to generate answers from those files is incorrect because file upload behavior is governed by admin settings. Administrators can enable or restrict uploads and control how uploaded data is used for responses and logging.

AWS WAF is incorrect because the web application firewall is not the control plane for Amazon Q Business guardrails or response-source policies. AWS WAF protects web traffic and is not used to configure Q Business response-source or topic-level guardrail settings.

Full AWS Practitioner Certification Question