MLA-C01 Practice Question: ML Solution Monitoring, Maintenance, and Security
A machine learning team is using SageMaker Studio for model development. They need to restrict all internet access from Studio notebooks and ensure that all data stays within a VPC. Which configuration should they use?
⚠ Common exam trap
Watch out — candidates often confuse network isolation mode (which applies only to training/inference containers) with VPC-only mode for Studio notebooks, or they incorrectly assume that a security group blocking all outbound traffic is a valid way to restrict internet access while still allowing necessary AWS API calls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the Studio domain with VPC-only mode and disable direct internet access
Configuring a SageMaker Studio domain with VPC-only mode and disabling direct internet access ensures that all Studio notebook traffic stays within the VPC and has no route to the public internet. This is the only configuration that both restricts internet access and enforces data residency within the VPC by using VPC-only networking, which does not rely on an internet gateway or NAT gateway for outbound traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a private link to connect Studio to the VPC
Why it's wrong here
PrivateLink provides connectivity but does not block internet access by itself.
- ✗
Enable network isolation mode for the Studio domain
Why it's wrong here
Network isolation is a per-model setting, not a Studio domain setting.
- ✗
Attach a security group that blocks all outbound traffic
Why it's wrong here
Security groups alone cannot fully enforce VPC-only mode for Studio.
- ✓
Configure the Studio domain with VPC-only mode and disable direct internet access
Why this is correct
VPC-only mode ensures Studio resources run within a VPC without internet access, meeting the requirement.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every MLA-C01 question from scratch — 835 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MLA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLA-C01 exam.