Question 30 of 68
Single answerCertylQ A company runs an Amazon SageMaker domain in a public subnet of a newly created VPC. The network is configured properly,and ML engineers can access the SageMaker domain. Recently, the company discovered suspicious traffic to the domain from a specific IP address.The company needs to block traffic from the specific IP address. Which update to the network configuration will meet this requirement?
ACreate a security group inbound rule to deny traffic from the specific IP address.Assign the security group to the domain.
✓BCreate a network ACL inbound rule to deny traffic from the specific IP address.Assign the rule to the default network Ad for the subnet where the domain is located. the specific IP address to the shadow endpoint.
DCreate a VPC route table to deny inbound traffic from the specific IP address. Assign the route table to the domain.
✓
Correct Answer: B
Create a network ACL inbound rule to deny traffic from the specific IP address.Assign the rule to the default network Ad for the subnet where the domain is located. the specific IP address to the shadow endpoint.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of AWS certification topics.