nerdexam
Amazon

MLS-C01 · Question #218

A healthcare company is using an Amazon SageMaker notebook instance to develop machine learning (ML) models. The company's data scientists will need to be able to access datasets stored in Amazon S3…

The correct answer is A. Configure the SageMaker notebook instance to be launched with a VPC attached and internet C. Create and configure an S3 VPC endpoint Attach it to the VPC. To disable direct internet access, you can specify a VPC for your notebook instance. By doing so, you prevent SageMaker from providing internet access to your notebook instance. As a result, the notebook instance can't train or host models unless your VPC has an interface…

Machine Learning Implementation and Operations

Question

A healthcare company is using an Amazon SageMaker notebook instance to develop machine learning (ML) models. The company's data scientists will need to be able to access datasets stored in Amazon S3 to train the models. Due to regulatory requirements, access to the data from instances and services used for training must not be transmitted over the internet. Which combination of steps should an ML specialist take to provide this access? (Choose two.)

Options

  • AConfigure the SageMaker notebook instance to be launched with a VPC attached and internet
  • BCreate and configure a VPN tunnel between SageMaker and Amazon S3.
  • CCreate and configure an S3 VPC endpoint Attach it to the VPC.
  • DCreate an S3 bucket policy that allows traffic from the VPC and denies traffic from the internet.
  • EDeploy AWS Transit Gateway Attach the S3 bucket and the SageMaker instance to the gateway.

How the community answered

(26 responses)
  • A
    73% (19)
  • B
    8% (2)
  • D
    4% (1)
  • E
    15% (4)

Explanation

To disable direct internet access, you can specify a VPC for your notebook instance. By doing so, you prevent SageMaker from providing internet access to your notebook instance. As a result, the notebook instance can't train or host models unless your VPC has an interface endpoint (AWS PrivateLink) or a NAT gateway and your security groups allow outbound connections. https://docs.aws.amazon.com/sagemaker/latest/dg/appendix-notebook-and-internet-access.html https://docs.aws.amazon.com/sagemaker/latest/dg/notebook-interface-endpoint.html

Topics

#SageMaker Networking#VPC Endpoints#S3 Private Access#Security Best Practices

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MLS-C01 Practice