Câu 29: AWS Certified Machine Learning Engineer - Associate MLA-C01

A company runs an Amazon SageMaker domain in a public subnet of a newly created VPC. The network is configured properly, and ML engineers can access the SageMaker domain.Recently, the company discovered suspicious traffic to the domain from a specific IP address. The company needs to block traffic from the specific IP address. Which update to the network configuration will meet this requirement?

1. A. Create a security group inbound rule to deny traffic from the specific IP address. Assign the security group to the domain.
2. B. Create a network ACL inbound rule to deny traffic from the specific IP address. Assign the rule to the default network Ad for the subnet where the domain is located. — đáp án hiện tại
3. C. Create a shadow variant for the domain. Configure SageMaker Inference Recommender to send traffic from the specific IP address to the shadow endpoint.
4. D. Create a VPC route table to deny inbound traffic from the specific IP address. Assign the route table to the domain.