MLA-C01 Practice Question: ML Solution Monitoring, Maintenance, and Security
A financial services company uses SageMaker Studio. They require that all Studio traffic remains within the corporate network and that user notebooks cannot access the internet. Which TWO configurations should they implement? (Select TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create the SageMaker Studio domain in a VPC with VPC endpoints for SageMaker and other services
To keep all traffic within the corporate network, SageMaker Studio must be configured with a VPC-only mode (no public internet access). Additionally, creating the Studio domain with a VPC and optionally using VPC endpoints for Studio and other services ensures traffic stays within AWS network. Network isolation mode applies to training jobs, not Studio. Security groups control traffic but do not prevent internet access. KMS encryption is for data at rest, not network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use security groups to block outbound traffic from Studio notebooks
Why it's wrong here
Security groups can block traffic but SageMaker Studio still needs internet for some operations unless VPC-only is enabled.
- ✗
Enable network isolation mode for all training jobs
Why it's wrong here
Network isolation is for training jobs, not Studio itself.
- ✗
Enable KMS encryption for Studio data
Why it's wrong here
KMS encryption protects data at rest, not network traffic.
- ✓
Create the SageMaker Studio domain in a VPC with VPC endpoints for SageMaker and other services
Why this is correct
Using VPC endpoints ensures Studio traffic stays within the AWS network.
- ✓
Configure SageMaker Studio to use VPC-only mode
Why this is correct
VPC-only mode restricts all Studio traffic to the VPC, no public internet.
Go deeper
Related to this question
About these practice questions
Courseiva writes every MLA-C01 question from scratch — 835 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MLA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLA-C01 exam.