MLA-C01 Practice Question: ML Solution Monitoring, Maintenance, and Security
An organization uses SageMaker Studio and needs to restrict Studio's internet access while allowing users to install custom packages from a private PyPI mirror hosted in a VPC. Which networking configuration should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Disable internet access for Studio and configure VPC-only mode, then use a VPC endpoint to the private PyPI mirror
SageMaker Studio in VPC-only mode (no internet access) combined with VPC-only mode for the domain and VPC endpoints to private PyPI mirror enables package installation from the private mirror. NAT gateway or internet gateway would allow internet access, which is not desired.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a NAT gateway to allow outbound traffic to the private PyPI mirror
Why it's wrong here
NAT gateway provides internet access, which is not desired; it also requires internet routing.
- ✗
Disable internet access for Studio and rely on SageMaker's default VPC configuration
Why it's wrong here
Default VPC configuration may not have VPC endpoint to private PyPI; without it, packages cannot be reached.
- ✓
Disable internet access for Studio and configure VPC-only mode, then use a VPC endpoint to the private PyPI mirror
Why this is correct
VPC-only mode blocks internet; VPC endpoint to the private mirror allows package installation from the VPC.
- ✗
Enable internet access for Studio and use a VPC endpoint to the private PyPI mirror
Why it's wrong here
Enabling internet access would allow unrestricted internet, violating the restriction.
Visual reference
Go deeper
Related to this question
About these practice questions
This MLA-C01 question is part of Courseiva's 835-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MLA-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLA-C01 exam.