Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 Practice Test 4
Question 30
As a regulated ML workload prepares for an automated regional rollout, the following condition is observed: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. The team must demonstrate a repeatable monitoring or security control. Which corrective action most directly addresses this ML workflow problem?
- Restrict writes to approved bucket prefixes and apply appropriate resource and organizational guardrails.
- Grant only the needed S3 and KMS actions for the approved data prefix and ensure appropriate role trust.
- Apply consistent approved cost allocation tags to ML jobs and supported linked resources and activate relevant reporting.
- Separate prompt input-distribution monitoring from delayed model-quality evaluation and join only observed labels to predictions.
Explanation
Correct Answer
A:Restrict writes to approved bucket prefixes and apply appropriate resource and organizational guardrails. This is the appropriate controlled remedy for cross-account s3 bucket exfiltration protection. Least privilege must constrain the destination resource; an unrestricted object-write policy can enable data exfiltration. Verify the cause with: Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. Then confirm: A test write to an approved prefix succeeds, while writes to unapproved external destinations are denied. Reported signal: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
Incorrect Answers
B:Grant only the needed S3 and KMS actions for the approved data prefix and ensure appropriate role trust. This addresses a different issue involving sagemaker execution role s3 least privilege. It does not correct the stated cross-account s3 bucket exfiltration protection mechanism. The targeted response is: Restrict writes to approved bucket prefixes and apply appropriate resource and organizational guardrails. Case evidence: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
C:Apply consistent approved cost allocation tags to ML jobs and supported linked resources and activate relevant reporting. This addresses a different issue involving tag-based ml training cost attribution. It does not correct the stated cross-account s3 bucket exfiltration protection mechanism. The targeted response is: Restrict writes to approved bucket prefixes and apply appropriate resource and organizational guardrails. Case evidence: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
D:Separate prompt input-distribution monitoring from delayed model-quality evaluation and join only observed labels to predictions. This addresses a different issue involving target-label delay in production quality monitoring. It does not correct the stated cross-account s3 bucket exfiltration protection mechanism. The targeted response is: Restrict writes to approved bucket prefixes and apply appropriate resource and organizational guardrails. Case evidence: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
Question 31
At a production AWS ML data lake supporting customer-facing predictions, the following condition is observed: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Engineers must avoid changing unrelated source partitions. Which investigation provides the most decisive FIRST evidence for the underlying problem?
- Inspect Spark stage durations, partition size distribution, join key frequencies, and executor spill metrics.
- Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint.
- Compare vocabulary hashes, normalization steps, token IDs for test strings, and serialized preprocessing versions.
- Inspect sample raw records, quoting rules, expected headers, and parsed column counts in the ingestion job.
Explanation
Correct Answer
B:Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. This directly tests glue job bookmark state error in the reported AWS ML workflow. Glue job bookmarks track supported processed state and must be managed deliberately during job changes. It distinguishes the problem before choosing a change. The related targeted response is: Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required. Reported signal: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
Incorrect Answers
A:Inspect Spark stage durations, partition size distribution, join key frequencies, and executor spill metrics. This is a possible diagnostic for glue spark join skew on dominant identifier, but it does not directly test the glue job bookmark state error failure reported here. Prioritize: Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. The relevant case is: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
C:Compare vocabulary hashes, normalization steps, token IDs for test strings, and serialized preprocessing versions. This is a possible diagnostic for text tokenization mismatch in serving, but it does not directly test the glue job bookmark state error failure reported here. Prioritize: Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. The relevant case is: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
D:Inspect sample raw records, quoting rules, expected headers, and parsed column counts in the ingestion job. This is a possible diagnostic for csv schema ambiguity during ingestion, but it does not directly test the glue job bookmark state error failure reported here. Prioritize: Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. The relevant case is: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
Question 32
During production evaluation of a SageMaker AI model candidate, the following condition is observed: Two notebooks deploy different model artifacts under the same informal name, so the team cannot reproduce which code and data generated production predictions. The release is blocked until the underlying model behavior is understood. What should the ML engineer inspect FIRST to distinguish this failure from unrelated issues?
- Compare pretrained validation metrics, fine-tuning learning curves, and layer-wise parameter updates.
- Inspect model package version, artifact URI, training metadata, data snapshot, and registry approval state.
- Inspect confusion matrix, class prevalence, false-negative cost, and precision-recall curves across thresholds.
- Inspect experiment run lineage, dataset/version hashes, code revisions, random seeds, and metric definitions.
Explanation
Correct Answer
B:Inspect model package version, artifact URI, training metadata, data snapshot, and registry approval state. This directly tests sagemaker model registry candidate approval in the reported AWS ML workflow. A human-readable model nickname is not a reproducible deployment identifier; versioned registry artifacts support controlled promotion. It distinguishes the problem before choosing a change. The related targeted response is: Register immutable model package versions with lineage and require explicit approval before promotion to production. Reported signal: Two notebooks deploy different model artifacts under the same informal name, so the team cannot reproduce which code and data generated production predictions. Operational setting: During production evaluation of a SageMaker AI model candidate.
Incorrect Answers
A:Compare pretrained validation metrics, fine-tuning learning curves, and layer-wise parameter updates. This is a possible diagnostic for fine-tuning pretrained model learning-rate stability, but it does not directly test the sagemaker model registry candidate approval failure reported here. Prioritize: Inspect model package version, artifact URI, training metadata, data snapshot, and registry approval state. The relevant case is: Two notebooks deploy different model artifacts under the same informal name, so the team cannot reproduce which code and data generated production predictions. Operational setting: During production evaluation of a SageMaker AI model candidate.
C:Inspect confusion matrix, class prevalence, false-negative cost, and precision-recall curves across thresholds. This is a possible diagnostic for precision versus recall fraud threshold, but it does not directly test the sagemaker model registry candidate approval failure reported here. Prioritize: Inspect model package version, artifact URI, training metadata, data snapshot, and registry approval state. The relevant case is: Two notebooks deploy different model artifacts under the same informal name, so the team cannot reproduce which code and data generated production predictions. Operational setting: During production evaluation of a SageMaker AI model candidate.
D:Inspect experiment run lineage, dataset/version hashes, code revisions, random seeds, and metric definitions. This is a possible diagnostic for reproducible sagemaker experiments comparisons, but it does not directly test the sagemaker model registry candidate approval failure reported here. Prioritize: Inspect model package version, artifact URI, training metadata, data snapshot, and registry approval state. The relevant case is: Two notebooks deploy different model artifacts under the same informal name, so the team cannot reproduce which code and data generated production predictions. Operational setting: During production evaluation of a SageMaker AI model candidate.
Question 33
At the model-governance gate before promotion of a new ML artifact, the following condition is observed: A SageMaker PyTorch training container repeatedly runs out of CUDA memory after batch size rises, although the model previously trained. The team needs a defensible technical decision rather than an untracked workaround. Which investigation provides the most decisive FIRST evidence for the underlying problem?
- Inspect forecast horizon, frequency, calendar patterns, historical covariates, and temporal train/test partitions.
- Inspect accelerator memory use, tensor shapes, batch size, gradient accumulation, and failed training logs.
- Check whether trustworthy target labels exist and compare feature distance scaling and cluster stability on a sample.
- Inspect Docker entrypoint, training logs, image architecture, input mount points, and required container contract.
Explanation
Correct Answer
B:Inspect accelerator memory use, tensor shapes, batch size, gradient accumulation, and failed training logs. This directly tests training batch size causes gpu memory exhaustion in the reported AWS ML workflow. Per-step activation memory generally scales with batch size; safe accumulation can preserve an effective larger batch. It distinguishes the problem before choosing a change. The related targeted response is: Reduce per-device batch size or use appropriate gradient accumulation or mixed precision after compatibility validation. Reported signal: A SageMaker PyTorch training container repeatedly runs out of CUDA memory after batch size rises, although the model previously trained. Operational setting: At the model-governance gate before promotion of a new ML artifact.
Incorrect Answers
A:Inspect forecast horizon, frequency, calendar patterns, historical covariates, and temporal train/test partitions. This is a possible diagnostic for time-series forecast horizon and seasonality, but it does not directly test the training batch size causes gpu memory exhaustion failure reported here. Prioritize: Inspect accelerator memory use, tensor shapes, batch size, gradient accumulation, and failed training logs. The relevant case is: A SageMaker PyTorch training container repeatedly runs out of CUDA memory after batch size rises, although the model previously trained. Operational setting: At the model-governance gate before promotion of a new ML artifact.
C:Check whether trustworthy target labels exist and compare feature distance scaling and cluster stability on a sample. This is a possible diagnostic for clustering for unlabeled customer segments, but it does not directly test the training batch size causes gpu memory exhaustion failure reported here. Prioritize: Inspect accelerator memory use, tensor shapes, batch size, gradient accumulation, and failed training logs. The relevant case is: A SageMaker PyTorch training container repeatedly runs out of CUDA memory after batch size rises, although the model previously trained. Operational setting: At the model-governance gate before promotion of a new ML artifact.
D:Inspect Docker entrypoint, training logs, image architecture, input mount points, and required container contract. This is a possible diagnostic for training image compatibility for byoc, but it does not directly test the training batch size causes gpu memory exhaustion failure reported here. Prioritize: Inspect accelerator memory use, tensor shapes, batch size, gradient accumulation, and failed training logs. The relevant case is: A SageMaker PyTorch training container repeatedly runs out of CUDA memory after batch size rises, although the model previously trained. Operational setting: At the model-governance gate before promotion of a new ML artifact.
Question 34
As a regional data-pipeline rollout is validated against approved AWS storage and streams, the following condition is observed: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. The data team must preserve event-time meaning and lineage. What postchange observation provides the strongest acceptance evidence?
- Memory use stays within limits and previously unseen categories are processed without dimension mismatch.
- Replaying the same notification leaves exactly one corresponding logical training record and records deduplication.
- Historical evaluation reproduces features available at prediction time, and production freshness is monitored against the same contract.
- Application p95 latency returns to target while exported records meet a measured completeness and staleness objective.
Explanation
Correct Answer
B:Replaying the same notification leaves exactly one corresponding logical training record and records deduplication. This is the acceptance evidence for the described s3 object event at-least-once processing scenario. Event notifications can be delivered more than once; consuming an event is not proof of exactly-once effects. The corrective implementation it validates is: Make the ingestion handler idempotent using a stable object/version key and conditional ledger writes. Reported signal: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
Incorrect Answers
A:Memory use stays within limits and previously unseen categories are processed without dimension mismatch. This could validate high-cardinality categorical encoding, but it does not establish that s3 object event at-least-once processing is resolved for this workload. Confirm instead: Replaying the same notification leaves exactly one corresponding logical training record and records deduplication. Observed problem: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
C:Historical evaluation reproduces features available at prediction time, and production freshness is monitored against the same contract. This could validate sagemaker feature store online offline consistency, but it does not establish that s3 object event at-least-once processing is resolved for this workload. Confirm instead: Replaying the same notification leaves exactly one corresponding logical training record and records deduplication. Observed problem: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
D:Application p95 latency returns to target while exported records meet a measured completeness and staleness objective. This could validate rds extraction overload into ml, but it does not establish that s3 object event at-least-once processing is resolved for this workload. Confirm instead: Replaying the same notification leaves exactly one corresponding logical training record and records deduplication. Observed problem: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
Question 35
As a regional data-pipeline rollout is validated against approved AWS storage and streams, the following condition is observed: A model trained on transaction amount and account age is unstable because one feature spans millions of units and the other spans years. The data team must preserve event-time meaning and lineage. Which observation most directly identifies the root cause of the reported behavior?
- Inspect feature availability timestamps and whether each label time follows the last feature observation.
- Inspect feature scale distributions, model sensitivity, and whether fitted scaler statistics are shared across serving and training.
- Compare online Feature Store record values and offline event-time keyed feature history for the same entity and model snapshot.
- Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint.
Explanation
Correct Answer
B:Inspect feature scale distributions, model sensitivity, and whether fitted scaler statistics are shared across serving and training. This directly tests standardization of numerical features in the reported AWS ML workflow. Gradient-based training is sensitive to disparate feature scales; training-serving transformation parity is required. It distinguishes the problem before choosing a change. The related targeted response is: Fit an appropriate scaler on training data and package the same transformation with inference preprocessing. Reported signal: A model trained on transaction amount and account age is unstable because one feature spans millions of units and the other spans years. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
Incorrect Answers
A:Inspect feature availability timestamps and whether each label time follows the last feature observation. This is a possible diagnostic for chronological split for forecast evaluation, but it does not directly test the standardization of numerical features failure reported here. Prioritize: Inspect feature scale distributions, model sensitivity, and whether fitted scaler statistics are shared across serving and training. The relevant case is: A model trained on transaction amount and account age is unstable because one feature spans millions of units and the other spans years. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
C:Compare online Feature Store record values and offline event-time keyed feature history for the same entity and model snapshot. This is a possible diagnostic for sagemaker feature store online offline consistency, but it does not directly test the standardization of numerical features failure reported here. Prioritize: Inspect feature scale distributions, model sensitivity, and whether fitted scaler statistics are shared across serving and training. The relevant case is: A model trained on transaction amount and account age is unstable because one feature spans millions of units and the other spans years. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
D:Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. This is a possible diagnostic for glue job bookmark state error, but it does not directly test the standardization of numerical features failure reported here. Prioritize: Inspect feature scale distributions, model sensitivity, and whether fitted scaler statistics are shared across serving and training. The relevant case is: A model trained on transaction amount and account age is unstable because one feature spans millions of units and the other spans years. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
Question 36
While testing a second region for recoverable deployment of the same ML service, the following condition is observed: A pipeline deploys a model directly from an unversioned notebook S3 path and cannot prove which evaluated candidate was approved. The deployment must be reproducible without manual console-only fixes. What targeted change should be implemented after verifying the stated cause?
- Promote an explicitly approved SageMaker Model Registry package version through repeatable pipeline stages.
- Require model evaluation and explicit approval gates before production deployment, blocking failed metric thresholds.
- Implement the SageMaker inference container
/ping and /invocations expectations or use a supported serving toolkit. - Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing.
Explanation
Correct Answer
A:Promote an explicitly approved SageMaker Model Registry package version through repeatable pipeline stages. This is the appropriate controlled remedy for model registry version promotion provenance. Immutable package versions and approval metadata connect evaluation with deployment; mutable S3 nicknames do not. Verify the cause with: Inspect model registry package versions, approval metadata, artifact hashes, and pipeline deployment inputs. Then confirm: The production endpoint matches the reviewed model package and auditor can trace its evaluation and approver. Reported signal: A pipeline deploys a model directly from an unversioned notebook S3 path and cannot prove which evaluated candidate was approved. Operational setting: While testing a second region for recoverable deployment of the same ML service.
Incorrect Answers
B:Require model evaluation and explicit approval gates before production deployment, blocking failed metric thresholds. This addresses a different issue involving codepipeline approval gate on model metrics. It does not correct the stated model registry version promotion provenance mechanism. The targeted response is: Promote an explicitly approved SageMaker Model Registry package version through repeatable pipeline stages. Case evidence: A pipeline deploys a model directly from an unversioned notebook S3 path and cannot prove which evaluated candidate was approved. Operational setting: While testing a second region for recoverable deployment of the same ML service.
C:Implement the SageMaker inference container /ping and /invocations expectations or use a supported serving toolkit. This addresses a different issue involving bring-your-own-inference-container contract. It does not correct the stated model registry version promotion provenance mechanism. The targeted response is: Promote an explicitly approved SageMaker Model Registry package version through repeatable pipeline stages. Case evidence: A pipeline deploys a model directly from an unversioned notebook S3 path and cannot prove which evaluated candidate was approved. Operational setting: While testing a second region for recoverable deployment of the same ML service.
D:Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing. This addresses a different issue involving multi-container inference pipeline responsibilities. It does not correct the stated model registry version promotion provenance mechanism. The targeted response is: Promote an explicitly approved SageMaker Model Registry package version through repeatable pipeline stages. Case evidence: A pipeline deploys a model directly from an unversioned notebook S3 path and cannot prove which evaluated candidate was approved. Operational setting: While testing a second region for recoverable deployment of the same ML service.
Question 37
During a production MLOps reliability and security review, the following condition is observed: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. The owner needs an auditable resolution without broadening privileges. Which observation most directly identifies the root cause of the reported behavior?
- Compare evaluated artifact hash, S3 object version, package provenance, and deployment manifest.
- Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls.
- Inspect resource tags, cost allocation tag activation, Cost Explorer grouping, and unallocated resource types.
- Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations.
Explanation
Correct Answer
B:Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. This directly tests cloudtrail training data access audit coverage in the reported AWS ML workflow. CloudTrail management events do not by default include every S3 object read; data-event selection provides that visibility. It distinguishes the problem before choosing a change. The related targeted response is: Enable appropriate CloudTrail S3 data events for the sensitive dataset with protected storage and retention. Reported signal: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.
Incorrect Answers
A:Compare evaluated artifact hash, S3 object version, package provenance, and deployment manifest. This is a possible diagnostic for model artifact supply-chain integrity, but it does not directly test the cloudtrail training data access audit coverage failure reported here. Prioritize: Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. The relevant case is: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.
C:Inspect resource tags, cost allocation tag activation, Cost Explorer grouping, and unallocated resource types. This is a possible diagnostic for tag-based ml training cost attribution, but it does not directly test the cloudtrail training data access audit coverage failure reported here. Prioritize: Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. The relevant case is: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.
D:Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations. This is a possible diagnostic for inference recommender benchmarking instance family, but it does not directly test the cloudtrail training data access audit coverage failure reported here. Prioritize: Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. The relevant case is: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.
Question 38
At a production AWS ML data lake supporting customer-facing predictions, the following condition is observed: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Engineers must avoid changing unrelated source partitions. Which TWO complementary choices provide the decisive diagnosis AND corrective response? Select TWO.
- Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint.
- Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required.
- Split first; fit the imputer only on the training partition and apply those learned statistics to validation and test data.
- Inspect prediction errors around midnight and feature representations for the periodic hour variable.
- Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target.
Explanation
Correct Answers
A:Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. This directly tests glue job bookmark state error in the reported AWS ML workflow. Glue job bookmarks track supported processed state and must be managed deliberately during job changes. It distinguishes the problem before choosing a change. The related targeted response is: Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
B:Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required. This is the appropriate controlled remedy for glue job bookmark state error. Glue job bookmarks track supported processed state and must be managed deliberately during job changes. Verify the cause with: Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. Then confirm: Two ordinary runs ingest only newly eligible objects while a separately invoked backfill handles prior intervals. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
Incorrect Answers
C:Split first; fit the imputer only on the training partition and apply those learned statistics to validation and test data. This selection concerns median imputation fitted on training split rather than the required diagnostic-and-remedy pair for glue job bookmark state error. Use evidence: Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. and the matching correction: Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required. Signal: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
D:Inspect prediction errors around midnight and feature representations for the periodic hour variable. This selection concerns time-series cyclical calendar feature rather than the required diagnostic-and-remedy pair for glue job bookmark state error. Use evidence: Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. and the matching correction: Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required. Signal: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
E:Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target. This selection concerns rds extraction overload into ml rather than the required diagnostic-and-remedy pair for glue job bookmark state error. Use evidence: Check job names, bookmark settings, run history, source object timestamps, and the previously committed checkpoint. and the matching correction: Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required. Signal: A daily AWS Glue ingestion job reprocesses a month of files after a deployment because its job bookmark state was reset or the job identity changed. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
Question 39
During an approved rollout of an AWS ML inference workload, the following condition is observed: A model package build fails to upload to the designated S3 artifact bucket, and engineers propose granting AdministratorAccess to the build role. The team must meet its documented availability and rollback constraints. What postchange observation provides the strongest acceptance evidence?
- The build uploads signed artifacts successfully while unauthorized buckets and prefixes remain denied.
- Large inputs complete without client request timeout and clients receive tracked result locations or failure notifications.
- The overnight batch completes within its service window while there is no idle always-on inference endpoint charge.
- Only the intended completed data batch launches one controlled training workflow, while unrelated objects do not.
Explanation
Correct Answer
A:The build uploads signed artifacts successfully while unauthorized buckets and prefixes remain denied. This is the acceptance evidence for the described codebuild iam least-privilege artifact upload scenario. Artifact publishing often requires S3 and KMS permissions, but broad administrative permissions are unnecessary and unsafe. The corrective implementation it validates is: Grant the build role only required object and key operations for its specific artifact prefix and encryption key. Reported signal: A model package build fails to upload to the designated S3 artifact bucket, and engineers propose granting AdministratorAccess to the build role. Operational setting: During an approved rollout of an AWS ML inference workload.
Incorrect Answers
B:Large inputs complete without client request timeout and clients receive tracked result locations or failure notifications. This could validate asynchronous endpoint for large payloads, but it does not establish that codebuild iam least-privilege artifact upload is resolved for this workload. Confirm instead: The build uploads signed artifacts successfully while unauthorized buckets and prefixes remain denied. Observed problem: A model package build fails to upload to the designated S3 artifact bucket, and engineers propose granting AdministratorAccess to the build role. Operational setting: During an approved rollout of an AWS ML inference workload.
C:The overnight batch completes within its service window while there is no idle always-on inference endpoint charge. This could validate real-time versus batch inference decision, but it does not establish that codebuild iam least-privilege artifact upload is resolved for this workload. Confirm instead: The build uploads signed artifacts successfully while unauthorized buckets and prefixes remain denied. Observed problem: A model package build fails to upload to the designated S3 artifact bucket, and engineers propose granting AdministratorAccess to the build role. Operational setting: During an approved rollout of an AWS ML inference workload.
D:Only the intended completed data batch launches one controlled training workflow, while unrelated objects do not. This could validate eventbridge conditional retraining trigger, but it does not establish that codebuild iam least-privilege artifact upload is resolved for this workload. Confirm instead: The build uploads signed artifacts successfully while unauthorized buckets and prefixes remain denied. Observed problem: A model package build fails to upload to the designated S3 artifact bucket, and engineers propose granting AdministratorAccess to the build role. Operational setting: During an approved rollout of an AWS ML inference workload.
Question 40
At a production AWS ML data lake supporting customer-facing predictions, the following condition is observed: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Engineers must avoid changing unrelated source partitions. Select TWO: the appropriate diagnostic check and the targeted implementation change.
- Inspect event identifiers, object versions or ETags, processing ledger, and downstream record keys for duplicate deliveries.
- Make the ingestion handler idempotent using a stable object/version key and conditional ledger writes.
- Inspect group sample sizes, label-positive fractions, and the appropriate SageMaker Clarify pretraining bias report.
- Define point-in-time offline joins, freshness SLAs, and aligned feature version logic for online retrieval.
- Write partitioned columnar Parquet data by event date, register accurate partitions in the catalog, and filter on partition keys.
Explanation
Correct Answers
A:Inspect event identifiers, object versions or ETags, processing ledger, and downstream record keys for duplicate deliveries. This directly tests s3 object event at-least-once processing in the reported AWS ML workflow. Event notifications can be delivered more than once; consuming an event is not proof of exactly-once effects. It distinguishes the problem before choosing a change. The related targeted response is: Make the ingestion handler idempotent using a stable object/version key and conditional ledger writes. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
B:Make the ingestion handler idempotent using a stable object/version key and conditional ledger writes. This is the appropriate controlled remedy for s3 object event at-least-once processing. Event notifications can be delivered more than once; consuming an event is not proof of exactly-once effects. Verify the cause with: Inspect event identifiers, object versions or ETags, processing ledger, and downstream record keys for duplicate deliveries. Then confirm: Replaying the same notification leaves exactly one corresponding logical training record and records deduplication. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
Incorrect Answers
C:Inspect group sample sizes, label-positive fractions, and the appropriate SageMaker Clarify pretraining bias report. This selection concerns clarify label imbalance measurement rather than the required diagnostic-and-remedy pair for s3 object event at-least-once processing. Use evidence: Inspect event identifiers, object versions or ETags, processing ledger, and downstream record keys for duplicate deliveries. and the matching correction: Make the ingestion handler idempotent using a stable object/version key and conditional ledger writes. Signal: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
D:Define point-in-time offline joins, freshness SLAs, and aligned feature version logic for online retrieval. This selection concerns sagemaker feature store online offline consistency rather than the required diagnostic-and-remedy pair for s3 object event at-least-once processing. Use evidence: Inspect event identifiers, object versions or ETags, processing ledger, and downstream record keys for duplicate deliveries. and the matching correction: Make the ingestion handler idempotent using a stable object/version key and conditional ledger writes. Signal: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
E:Write partitioned columnar Parquet data by event date, register accurate partitions in the catalog, and filter on partition keys. This selection concerns partition pruning in s3 parquet training input rather than the required diagnostic-and-remedy pair for s3 object event at-least-once processing. Use evidence: Inspect event identifiers, object versions or ETags, processing ledger, and downstream record keys for duplicate deliveries. and the matching correction: Make the ingestion handler idempotent using a stable object/version key and conditional ledger writes. Signal: An S3 event-triggered feature ingestion function processes the same uploaded object twice, creating duplicate labeled samples. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.