ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Machine Learning Engineer - Associate MLA-C01 All Questions

View all questions & answers for the AWS Certified Machine Learning Engineer - Associate MLA-C01 exam
Go to Exam

Exam AWS Certified Machine Learning Engineer - Associate MLA-C01 topic 1 question 30 discussion

Exam question from Amazon's AWS Certified Machine Learning Engineer - Associate MLA-C01
Question #: 30
Topic #: 1
[All AWS Certified Machine Learning Engineer - Associate MLA-C01 Questions]

A company runs an Amazon SageMaker domain in a public subnet of a newly created VPC. The network is configured properly, and ML engineers can access the SageMaker domain.
Recently, the company discovered suspicious traffic to the domain from a specific IP address. The company needs to block traffic from the specific IP address.
Which update to the network configuration will meet this requirement?

  • A. Create a security group inbound rule to deny traffic from the specific IP address. Assign the security group to the domain.
  • B. Create a network ACL inbound rule to deny traffic from the specific IP address. Assign the rule to the default network Ad for the subnet where the domain is located.
  • C. Create a shadow variant for the domain. Configure SageMaker Inference Recommender to send traffic from the specific IP address to the shadow endpoint.
  • D. Create a VPC route table to deny inbound traffic from the specific IP address. Assign the route table to the domain.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by GiorgioGss at Nov. 27, 2024, 9:51 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Certified101
4 weeks ago
Selected Answer: B
There is no deny in SG's - only allows- So NACL is the clear answer here
upvoted 1 times
...
Saransundar
3 months ago
Selected Answer: B
Protection at subnet level: Network ACL. Specific IP addresses can be denied at inbound connection level
upvoted 2 times
...
GiorgioGss
3 months, 1 week ago
Selected Answer: B
That's basic network topic.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago