easyMultiple ChoiceObjective-mapped
MLA-C01 Practice Question: A company uses an Amazon SageMaker endpoint for…
A company uses an Amazon SageMaker endpoint for real-time inference. The security team requires that all traffic between the endpoint and the client application be encrypted in transit. Which configuration ensures this?
⚠ Common exam trap
The trap here is that candidates often overthink security requirements and assume additional configuration (like VPC endpoints or ACM certificates) is needed, when in fact SageMaker endpoints are inherently encrypted in transit via HTTPS by default.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The endpoint is automatically served over HTTPS; no additional configuration is needed.
Amazon SageMaker endpoints are automatically served over HTTPS, which encrypts all data in transit between the client application and the endpoint. This is a default behavior of SageMaker real-time inference endpoints, so no additional configuration is required to meet the encryption-in-transit requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy the endpoint in a VPC and use VPC Endpoints.
Why it's wrong here
VPC provides network isolation but not encryption in transit by default.
- ✗
Use AWS Key Management Service (KMS) to encrypt the data in transit.
Why it's wrong here
KMS is for encryption at rest.
- ✓
The endpoint is automatically served over HTTPS; no additional configuration is needed.
Why this is correct
SageMaker endpoints use HTTPS by default.
- ✗
Attach an AWS Certificate Manager (ACM) certificate to the endpoint.
Why it's wrong here
SageMaker manages its own certificates; you cannot attach ACM certificates directly.
Go deeper
Related to this question
About these practice questions
One of 835 original MLA-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MLA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLA-C01 exam.