MLA-C01 Practice Question: ML Solution Monitoring, Maintenance, and Security
A machine learning team needs to ensure that all model training and inference jobs within SageMaker Studio run in a private network without internet access. The team also requires that inter-container traffic within the same training job be encrypted. Which configurations should they combine?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable network isolation mode and inter-container traffic encryption
VPC-only mode restricts all traffic to the VPC, and inter-container traffic encryption ensures data in transit within the job is encrypted. These two settings together meet the requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure SageMaker Studio in VPC-only mode and use KMS encryption
Why it's wrong here
KMS encrypts data at rest, not inter-container traffic.
- ✗
Use a VPC with a NAT gateway and enable network isolation
Why it's wrong here
A NAT gateway would allow outbound internet access, contradicting the requirement.
- ✗
Enable inter-container traffic encryption and use a VPC with VPC endpoints
Why it's wrong here
VPC endpoints allow access to AWS services but do not enforce VPC-only mode; internet access may still be possible.
- ✓
Enable network isolation mode and inter-container traffic encryption
Why this is correct
Network isolation removes internet access, and inter-container encryption secures traffic between containers.
Go deeper
Related to this question
About these practice questions
One of 835 original MLA-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MLA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLA-C01 exam.