A company runs a SageMaker notebook instance that needs to access an S3 bucket. The notebook instance is in a VPC, and the security team wants to ensure that the traffic between the notebook and S3 does not go over the internet. Which configuration should be used?

Create a VPC endpoint for S3 and attach it to the VPC. Ensure the notebook instance's security group allows outbound traffic to the VPC endpoint.

Use a VPC peering connection to connect to S3.

Use an internet gateway and route traffic to S3 through the internet gateway.

Create a NAT gateway in the VPC and route traffic to S3 through the NAT gateway.

Which AWS service is used to centrally manage the customer master keys (CMKs) that encrypt data at rest in services like Amazon S3 and Amazon EFS?

AWS Key Management Service (KMS)

AWSCertified Machine Learning Engineer - Associate

Domain 4Objective 3

Task 4.3: Secure AWS Resources MLA-C01 Practice Questions (Page 3)

Part of the Content Domain 4: ML Solution Monitoring, Maintenance, and Security domain, which accounts for 24% of the MLA-C01 exam. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~12–20 in this domain), expect 4–7 from this objective — we provide 13 practice questions to prepare you well beyond it. (estimate)

13questions here

3free pages

6concepts

24%of the exam

Questions 11–13

11application · medium
A company runs a SageMaker notebook instance that needs to access an S3 bucket. The notebook instance is in a VPC, and the security team wants to ensure that the traffic between the notebook and S3 does not go over the internet. Which configuration should be used?
Select an answer first
12foundation · easy
Which AWS resource acts as a virtual firewall for an individual EC2 instance, controlling inbound and outbound traffic at the instance level?
Select an answer first
13foundation · easy
Which AWS service is used to centrally manage the customer master keys (CMKs) that encrypt data at rest in services like Amazon S3 and Amazon EFS?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to MLA-C01

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “MLA-C01” is a trademark of its owner, used for identification only.

Task 4.3: Secure AWS Resources MLA-C01 Practice Questions (Page 3)

Questions 11–13

A company runs a SageMaker notebook instance that needs to access an S3 bucket. The notebook instance is in a VPC, and the security team wants to ensure that the traffic between the notebook and S3 does not go over the internet. Which configuration should be used?

Which AWS resource acts as a virtual firewall for an individual EC2 instance, controlling inbound and outbound traffic at the instance level?

Which AWS service is used to centrally manage the customer master keys (CMKs) that encrypt data at rest in services like Amazon S3 and Amazon EFS?

Keep studying — Content Domain 4: ML Solution Monitoring, Maintenance, and Security