MLA-C01 Question #156: Real Exam Question with Answer & Explanation

Question

A company is building an Amazon SageMaker AI pipeline for an ML model. The pipeline uses distributed processing and training. An ML engineer needs to encrypt network communication between instances that run distributed jobs. The ML engineer configures the distributed jobs to run in a private VPC. What should the ML engineer do to meet the encryption requirement?

Options

• AEnable network isolation.
• BConfigure traffic encryption by using security groups.
• CEnable inter-container traffic encryption.
• DEnable VPC flow logs.

Explanation

{"question_number": 4, "correct_answer": "C", "explanation": "When SageMaker runs distributed training or processing jobs, the worker instances communicate with each other over the network. 'Inter-container traffic encryption' is the SageMaker feature that encrypts all network traffic flowing between those containers using TLS, directly satisfying the encryption requirement. Option A (network isolation) prevents containers from making outbound internet calls but does not encrypt the communication between containers. Option B (security groups) controls which traffic is allowed in/out of instances at the network level but provides no encryption. Option D (VPC flow logs) captures metadata about network traffic for auditing purposes but does not encrypt it. Running in a private VPC is a good network control, but encryption of inter-container traffic requires the dedicated SageMaker setting.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.