MLA-C01 Domain 4: ML Solution Monitoring, Maintenance, and Security

Which service should you use to restrict notebook internet access for compliance?

Multiple choice — select one answer

Answer choices

  1. a. CloudWatch alarms + CodeDeploy or pipeline approvals
  2. b. SageMaker Studio in VPC-only mode
  3. c. SageMaker Model Monitor
  4. d. Open ingress 0.0.0.0/0

Architectural breakdown & explanation

VPC-only Studio limits data exfiltration.

Correct answer(s): b. SageMaker Studio in VPC-only mode

Exam domain: Domain 4: ML Solution Monitoring, Maintenance, and Security (22% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Machine Learning Engineer – Associate bank. Run a full timed practice exam with domain-weighted random questions in your browser.