A company needs to use Amazon SageMaker for model training and inference. The company must comply with regulatory requirements to run SageMaker jobs in an isolated environment without internet…

Question

Options

• ARun SageMaker training and inference by using SageMaker Experiments.
• BRun SageMaker training and Inference by using network Isolation.
• CEncrypt the data at rest by using encryption for SageMaker geospatial capabilities.
• DAssociate appropriate AWS Identity and Access Management (IAM) roles with the SageMaker

• A
  3% (1)
• B
  79% (23)
• C
  3% (1)
• D
  14% (4)

Explanation

Explanation

Option B – Network Isolation is correct because SageMaker supports a network isolation mode that prevents training and inference containers from making any outbound network calls to the internet, satisfying regulatory requirements for isolated, air-gapped environments. This is achieved by configuring the EnableNetworkIsolation flag and optionally placing jobs within a VPC, ensuring no data leaves the controlled environment.

Why the distractors are wrong:

• Option A (SageMaker Experiments) is a tool for tracking and comparing ML experiments (metrics, parameters, artifacts) - it has nothing to do with network isolation or regulatory compliance.
• Option C (Geospatial encryption) addresses data encryption at rest for a specific SageMaker feature, not network-level isolation; encryption and isolation are separate concerns.
• Option D (IAM roles) controls permissions and access, not network connectivity - IAM alone cannot prevent internet access during job execution.

Memory Tip: Think of "Network Isolation = No Internet" - whenever an exam question mentions regulatory requirements for isolated environments or no internet access in SageMaker, the answer will involve network isolation, not logging, encryption, or IAM.

No community discussion yet for this question.