Courseiva
easyMultiple ChoiceObjective-mapped

MLA-C01 Practice Question: A company requires that all SageMaker notebook…

A company requires that all SageMaker notebook instances be created within a private VPC without internet access. Which configuration step is mandatory?

⚠ Common exam trap

Candidates often assume SageMaker Studio notebooks are automatically private, but they also require explicit VPC configuration to restrict internet access, and the question specifically asks about notebook instances, not Studio.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure VPC settings when creating the notebook instance, choosing a private subnet.

When creating a SageMaker notebook instance, you must explicitly configure the VPC settings and select a private subnet to ensure the instance is launched within a private VPC without internet access. This is mandatory because SageMaker notebook instances, by default, are created with internet access enabled unless you specify a VPC with no direct internet access. Selecting a private subnet ensures the instance uses only VPC endpoints or NAT gateways for outbound traffic, meeting the no-internet requirement.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Use a SageMaker Studio notebook instead.

    Why it's wrong here

    SageMaker Studio also requires VPC configuration; it is not a mandatory step for reducing internet access.

  • Configure VPC settings when creating the notebook instance, choosing a private subnet.

    Why this is correct

    Selecting a private subnet ensures the notebook instance is launched in the VPC without a public IP, fulfilling the requirement.

  • Enable SageMaker direct internet access.

    Why it's wrong here

    Direct internet access would allow internet traffic, which is not desired for a private VPC without internet access.

  • Assign a public IP to the notebook instance.

    Why it's wrong here

    Assigning a public IP would give the instance internet access, contradicting the requirement.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

Courseiva writes every MLA-C01 question from scratch — 835 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This MLA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLA-C01 exam.