MLA-C01 Question #30: Real Exam Question with Answer & Explanation

Question

A company runs an Amazon SageMaker domain in a public subnet of a newly created VPC. The network is configured properly, and ML engineers can access the SageMaker domain. Recently, the company discovered suspicious traffic to the domain from a specific IP address. The company needs to block traffic from the specific IP address. Which update to the network configuration will meet this requirement?

Options

• ACreate a security group inbound rule to deny traffic from the specific IP address. Assign the
• BCreate a network ACL inbound rule to deny traffic from the specific IP address. Assign the rule to
• CCreate a shadow variant for the domain. Configure SageMaker Inference Recommender to send
• DCreate a VPC route table to deny inbound traffic from the specific IP address. Assign the route