nerdexam
Amazon

MLS-C01 · Question #126

A machine learning (ML) specialist wants to secure calls to the Amazon SageMaker Service API. The specialist has configured Amazon VPC with a VPC interface endpoint for the Amazon SageMaker Service AP

Sign in or unlock MLS-C01 to reveal the answer and full explanation for question #126. The question stem and answer options stay visible for context.

ML Implementation and Operations

Question

A machine learning (ML) specialist wants to secure calls to the Amazon SageMaker Service API. The specialist has configured Amazon VPC with a VPC interface endpoint for the Amazon SageMaker Service API and is attempting to secure traffic from specific sets of instances and IAM users. The VPC is configured with a single public subnet. Which combination of steps should the ML specialist take to secure the traffic? (Choose two.)

Options

  • AAdd a VPC endpoint policy to allow access to the IAM users.
  • BModify the users' IAM policy to allow access to Amazon SageMaker Service API calls only.
  • CModify the security group on the endpoint network interface to restrict access to the instances.
  • DModify the ACL on the endpoint network interface to restrict access to the instances.
  • EAdd a SageMaker Runtime VPC endpoint interface to the VPC.

Unlock MLS-C01 to see the answer

You've previewed enough free MLS-C01 questions. Unlock MLS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#VPC Endpoints#Endpoint Policies#Security Groups#SageMaker Security
Full MLS-C01 Practice