AWS Certified Machine Learning Engineer - Associate MLA-C01 — Topic 1 Question 167

Question

A company runs an Amazon SageMaker AI domain in a public subnet of a newly created VPC. The network is configured properly, and ML engineers can access the SageMaker AI domain. Recently, the company discovered suspicious traffic to the domain from a specific IP address. The company needs to block traffic from the specific IP address. Which update to the network configuration will meet this requirement?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a network ACL inbound rule to deny traffic from the specific IP address. Assign the rule to the default network ACL for the subnet where the domain is located.

AWS Certified Machine Learning Engineer - Associate MLA-C01 — Question 167