cert
cert-1
cert-2

Pass Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
AWS Certified Machine Learning Engineer - Associate MLA-C01 Exam - Verified By Experts
AWS Certified Machine Learning Engineer - Associate MLA-C01 Premium Bundle
$29.98

AWS Certified Machine Learning Engineer - Associate MLA-C01 Premium Bundle

$79.99
$109.97
  • Premium File 270 Questions & Answers. Last update: Oct 24, 2026
  • Training Course 244 Video Lectures
  • Study Guide 548 Pages
 
$109.97
$79.99
accept 42 downloads in last 7 days
block-screenshots
Purchase Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 Exam Training Products Individually
Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 Premium File
Premium File 270 Q&A
$76.99$69.99
Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 Video Training Course
Training Course 244 Lectures
$21.99 $19.99
Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 PDF Study Guide
Study Guide 548 Pages
$21.99 $19.99
Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 Practice Test 76

Question 750

While testing a second region for recoverable deployment of the same ML service, the following condition is observed: A private-subnet inference deployment cannot retrieve its S3 model artifact because the network has no authorized path to the bucket. The deployment must be reproducible without manual console-only fixes. Which TWO complementary choices provide the decisive diagnosis AND corrective response? Select TWO.

  1. Inspect target processor, supported Neo compiler configurations, operator compatibility, and deployment artifact format.
  2. Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs.
  3. Provide an approved S3 gateway or interface endpoint path and least-privilege bucket/role permissions without unnecessarily opening internet egress.
  4. Implement the SageMaker inference container /ping and /invocations expectations or use a supported serving toolkit.
  5. Keep the blue environment available until green health gates pass and automate traffic rollback on failed alarms.

Explanation

Correct Answers

B:

Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs. This directly tests sagemaker vpc endpoint access for private artifacts in the reported AWS ML workflow. VPC isolation requires explicit supported network paths to AWS services; IAM permission alone does not create connectivity. It distinguishes the problem before choosing a change. The related targeted response is: Provide an approved S3 gateway or interface endpoint path and least-privilege bucket/role permissions without unnecessarily opening internet egress. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A private-subnet inference deployment cannot retrieve its S3 model artifact because the network has no authorized path to the bucket. Operational setting: While testing a second region for recoverable deployment of the same ML service.

C:

Provide an approved S3 gateway or interface endpoint path and least-privilege bucket/role permissions without unnecessarily opening internet egress. This is the appropriate controlled remedy for sagemaker vpc endpoint access for private artifacts. VPC isolation requires explicit supported network paths to AWS services; IAM permission alone does not create connectivity. Verify the cause with: Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs. Then confirm: The deployment loads artifacts privately and blocked public routes remain unused. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A private-subnet inference deployment cannot retrieve its S3 model artifact because the network has no authorized path to the bucket. Operational setting: While testing a second region for recoverable deployment of the same ML service.

Incorrect Answers

A:

Inspect target processor, supported Neo compiler configurations, operator compatibility, and deployment artifact format. This selection concerns sagemaker neo edge compiler compatibility rather than the required diagnostic-and-remedy pair for sagemaker vpc endpoint access for private artifacts. Use evidence: Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs. and the matching correction: Provide an approved S3 gateway or interface endpoint path and least-privilege bucket/role permissions without unnecessarily opening internet egress. Signal: A private-subnet inference deployment cannot retrieve its S3 model artifact because the network has no authorized path to the bucket. Operational setting: While testing a second region for recoverable deployment of the same ML service.

D:

Implement the SageMaker inference container /ping and /invocations expectations or use a supported serving toolkit. This selection concerns bring-your-own-inference-container contract rather than the required diagnostic-and-remedy pair for sagemaker vpc endpoint access for private artifacts. Use evidence: Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs. and the matching correction: Provide an approved S3 gateway or interface endpoint path and least-privilege bucket/role permissions without unnecessarily opening internet egress. Signal: A private-subnet inference deployment cannot retrieve its S3 model artifact because the network has no authorized path to the bucket. Operational setting: While testing a second region for recoverable deployment of the same ML service.

E:

Keep the blue environment available until green health gates pass and automate traffic rollback on failed alarms. This selection concerns blue-green endpoint rollback after health failure rather than the required diagnostic-and-remedy pair for sagemaker vpc endpoint access for private artifacts. Use evidence: Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs. and the matching correction: Provide an approved S3 gateway or interface endpoint path and least-privilege bucket/role permissions without unnecessarily opening internet egress. Signal: A private-subnet inference deployment cannot retrieve its S3 model artifact because the network has no authorized path to the bucket. Operational setting: While testing a second region for recoverable deployment of the same ML service.

Question 751

At a production AWS ML data lake supporting customer-facing predictions, the following condition is observed: A near-real-time account feature sums transactions using processing time, so late-arriving events land in the wrong window and produce inconsistent scores. Engineers must avoid changing unrelated source partitions. Which measured outcome would confirm that the correction worked as intended?

  1. A controlled out-of-order replay yields the expected window totals and bounded late-event treatment.
  2. Replaying the same notification leaves exactly one corresponding logical training record and records deduplication.
  3. The recovery run reads a complete expected interval from retained stream records or durable archive without silent gaps.
  4. Identical inputs create identical token IDs in train and serving paths, including punctuation and unknown words.

Explanation

Correct Answer

A:

A controlled out-of-order replay yields the expected window totals and bounded late-event treatment. This is the acceptance evidence for the described streaming feature rolling window correctness scenario. Processing-time windows depend on arrival timing; event-time windows need explicit watermarks and late-event policy. The corrective implementation it validates is: Define event-time windows with appropriate lateness handling and a documented revision policy for late records. Reported signal: A near-real-time account feature sums transactions using processing time, so late-arriving events land in the wrong window and produce inconsistent scores. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

Incorrect Answers

B:

Replaying the same notification leaves exactly one corresponding logical training record and records deduplication. This could validate s3 object event at-least-once processing, but it does not establish that streaming feature rolling window correctness is resolved for this workload. Confirm instead: A controlled out-of-order replay yields the expected window totals and bounded late-event treatment. Observed problem: A near-real-time account feature sums transactions using processing time, so late-arriving events land in the wrong window and produce inconsistent scores. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

C:

The recovery run reads a complete expected interval from retained stream records or durable archive without silent gaps. This could validate kinesis consumer retention gap, but it does not establish that streaming feature rolling window correctness is resolved for this workload. Confirm instead: A controlled out-of-order replay yields the expected window totals and bounded late-event treatment. Observed problem: A near-real-time account feature sums transactions using processing time, so late-arriving events land in the wrong window and produce inconsistent scores. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

D:

Identical inputs create identical token IDs in train and serving paths, including punctuation and unknown words. This could validate text tokenization mismatch in serving, but it does not establish that streaming feature rolling window correctness is resolved for this workload. Confirm instead: A controlled out-of-order replay yields the expected window totals and bounded late-event treatment. Observed problem: A near-real-time account feature sums transactions using processing time, so late-arriving events land in the wrong window and produce inconsistent scores. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

Question 752

While testing a second region for recoverable deployment of the same ML service, the following condition is observed: A retraining workflow copies notebook cells into a scheduled script without tracking data snapshots or processing dependencies, leading to inconsistent model artifacts. The deployment must be reproducible without manual console-only fixes. Which engineering response resolves the actual issue without masking the symptoms?

  1. Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp.
  2. Keep the blue environment available until green health gates pass and automate traffic rollback on failed alarms.
  3. Benchmark supported accelerated inference instances and choose GPU capacity only if latency and throughput gains justify cost.
  4. Define a parameterized SageMaker Pipeline that orders steps and records source data, code and model artifacts.

Explanation

Correct Answer

D:

Define a parameterized SageMaker Pipeline that orders steps and records source data, code and model artifacts. This is the appropriate controlled remedy for sagemaker pipelines parameterized retraining. Pipelines make dependencies explicit; manually ordered notebook operations are difficult to repeat or audit. Verify the cause with: Inspect the DAG of processing, training, evaluation and registration steps, along with parameter and artifact lineage. Then confirm: Repeated runs with the same inputs reproduce the ordered processing and generate auditable versioned outputs. Reported signal: A retraining workflow copies notebook cells into a scheduled script without tracking data snapshots or processing dependencies, leading to inconsistent model artifacts. Operational setting: While testing a second region for recoverable deployment of the same ML service.

Incorrect Answers

A:

Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp. This addresses a different issue involving endpoint scale-to-zero cold capacity planning. It does not correct the stated sagemaker pipelines parameterized retraining mechanism. The targeted response is: Define a parameterized SageMaker Pipeline that orders steps and records source data, code and model artifacts. Case evidence: A retraining workflow copies notebook cells into a scheduled script without tracking data snapshots or processing dependencies, leading to inconsistent model artifacts. Operational setting: While testing a second region for recoverable deployment of the same ML service.

B:

Keep the blue environment available until green health gates pass and automate traffic rollback on failed alarms. This addresses a different issue involving blue-green endpoint rollback after health failure. It does not correct the stated sagemaker pipelines parameterized retraining mechanism. The targeted response is: Define a parameterized SageMaker Pipeline that orders steps and records source data, code and model artifacts. Case evidence: A retraining workflow copies notebook cells into a scheduled script without tracking data snapshots or processing dependencies, leading to inconsistent model artifacts. Operational setting: While testing a second region for recoverable deployment of the same ML service.

C:

Benchmark supported accelerated inference instances and choose GPU capacity only if latency and throughput gains justify cost. This addresses a different issue involving gpu versus cpu inference fit. It does not correct the stated sagemaker pipelines parameterized retraining mechanism. The targeted response is: Define a parameterized SageMaker Pipeline that orders steps and records source data, code and model artifacts. Case evidence: A retraining workflow copies notebook cells into a scheduled script without tracking data snapshots or processing dependencies, leading to inconsistent model artifacts. Operational setting: While testing a second region for recoverable deployment of the same ML service.

Question 753

As a regional data-pipeline rollout is validated against approved AWS storage and streams, the following condition is observed: A hiring-model dataset has very different positive-label rates across sensitive groups, but the team compares only global accuracy. The data team must preserve event-time meaning and lineage. Which measured outcome would confirm that the correction worked as intended?

  1. Agreement on a held-out gold set rises without silently discarding rare legitimate classes.
  2. The transformed distribution is less skewed and inference uses identical guarded transformations.
  3. Annotation workers can label required content without viewing direct identifiers and authorized audits can trace approved mappings.
  4. The report quantifies class or group imbalance with reproducible group counts and documents remediation assumptions.

Explanation

Correct Answer

D:

The report quantifies class or group imbalance with reproducible group counts and documents remediation assumptions. This is the acceptance evidence for the described clarify label imbalance measurement scenario. Aggregate accuracy can conceal unequal source-label distributions, which pretraining metrics assess before model fitting. The corrective implementation it validates is: Measure label distribution differences with an appropriate pretraining bias metric and improve data representation before training. Reported signal: A hiring-model dataset has very different positive-label rates across sensitive groups, but the team compares only global accuracy. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

Incorrect Answers

A:

Agreement on a held-out gold set rises without silently discarding rare legitimate classes. This could validate ground truth labeling agreement review, but it does not establish that clarify label imbalance measurement is resolved for this workload. Confirm instead: The report quantifies class or group imbalance with reproducible group counts and documents remediation assumptions. Observed problem: A hiring-model dataset has very different positive-label rates across sensitive groups, but the team compares only global accuracy. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

B:

The transformed distribution is less skewed and inference uses identical guarded transformations. This could validate skewed numerical feature log transformation, but it does not establish that clarify label imbalance measurement is resolved for this workload. Confirm instead: The report quantifies class or group imbalance with reproducible group counts and documents remediation assumptions. Observed problem: A hiring-model dataset has very different positive-label rates across sensitive groups, but the team compares only global accuracy. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

C:

Annotation workers can label required content without viewing direct identifiers and authorized audits can trace approved mappings. This could validate pii masking before model labeling, but it does not establish that clarify label imbalance measurement is resolved for this workload. Confirm instead: The report quantifies class or group imbalance with reproducible group counts and documents remediation assumptions. Observed problem: A hiring-model dataset has very different positive-label rates across sensitive groups, but the team compares only global accuracy. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

Question 754

As a regional data-pipeline rollout is validated against approved AWS storage and streams, the following condition is observed: A rare-defect classifier oversamples minority instances before creating cross-validation folds, causing near copies in both training and holdout. The data team must preserve event-time meaning and lineage. What postchange observation provides the strongest acceptance evidence?

  1. Concurrent workers observe consistent supported shared-file operations and training artifact delivery remains durable.
  2. Invalid batches are rejected with attributable rule failures and accepted training data meets the entity-key contract.
  3. No synthetic or duplicated minority instance leaks into held-out folds, and minority-class recall reflects genuine unseen cases.
  4. Agreement on a held-out gold set rises without silently discarding rare legitimate classes.

Explanation

Correct Answer

C:

No synthetic or duplicated minority instance leaks into held-out folds, and minority-class recall reflects genuine unseen cases. This is the acceptance evidence for the described class imbalance handled inside cross-validation scenario. Oversampling before splitting contaminates evaluation and hides the real error rate on rare classes. The corrective implementation it validates is: Apply resampling only inside each training fold and evaluate untouched validation folds using precision and recall metrics. Reported signal: A rare-defect classifier oversamples minority instances before creating cross-validation folds, causing near copies in both training and holdout. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

Incorrect Answers

A:

Concurrent workers observe consistent supported shared-file operations and training artifact delivery remains durable. This could validate s3 versus efs training storage choice, but it does not establish that class imbalance handled inside cross-validation is resolved for this workload. Confirm instead: No synthetic or duplicated minority instance leaks into held-out folds, and minority-class recall reflects genuine unseen cases. Observed problem: A rare-defect classifier oversamples minority instances before creating cross-validation folds, causing near copies in both training and holdout. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

B:

Invalid batches are rejected with attributable rule failures and accepted training data meets the entity-key contract. This could validate glue data quality non-null contract, but it does not establish that class imbalance handled inside cross-validation is resolved for this workload. Confirm instead: No synthetic or duplicated minority instance leaks into held-out folds, and minority-class recall reflects genuine unseen cases. Observed problem: A rare-defect classifier oversamples minority instances before creating cross-validation folds, causing near copies in both training and holdout. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

D:

Agreement on a held-out gold set rises without silently discarding rare legitimate classes. This could validate ground truth labeling agreement review, but it does not establish that class imbalance handled inside cross-validation is resolved for this workload. Confirm instead: No synthetic or duplicated minority instance leaks into held-out folds, and minority-class recall reflects genuine unseen cases. Observed problem: A rare-defect classifier oversamples minority instances before creating cross-validation folds, causing near copies in both training and holdout. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.

Question 755

During a production MLOps reliability and security review, the following condition is observed: A training fleet runs many jobs and operators manually search thousands of unstructured log files to locate recurring data-channel failures. The owner needs an auditable resolution without broadening privileges. What postchange observation provides the strongest acceptance evidence?

  1. A query isolates the failing job versions and recurring error class within the incident interval.
  2. Training jobs reach the intended service privately while unauthorized external egress stays blocked.
  3. Parity checks match transformations within documented freshness tolerances for test entities.
  4. The chosen fix reduces measured end-to-end p95 latency and component metrics explain the change.

Explanation

Correct Answer

A:

A query isolates the failing job versions and recurring error class within the incident interval. This is the acceptance evidence for the described cloudwatch logs insights error correlation scenario. Querying structured centralized logs scales better than visual browsing of unrelated service output. The corrective implementation it validates is: Use structured logging and scoped CloudWatch Logs Insights queries to aggregate failures by training job and time. Reported signal: A training fleet runs many jobs and operators manually search thousands of unstructured log files to locate recurring data-channel failures. Operational setting: During a production MLOps reliability and security review.

Incorrect Answers

B:

Training jobs reach the intended service privately while unauthorized external egress stays blocked. This could validate private vpc endpoint policy for sagemaker apis, but it does not establish that cloudwatch logs insights error correlation is resolved for this workload. Confirm instead: A query isolates the failing job versions and recurring error class within the incident interval. Observed problem: A training fleet runs many jobs and operators manually search thousands of unstructured log files to locate recurring data-channel failures. Operational setting: During a production MLOps reliability and security review.

C:

Parity checks match transformations within documented freshness tolerances for test entities. This could validate training-serving feature skew incident, but it does not establish that cloudwatch logs insights error correlation is resolved for this workload. Confirm instead: A query isolates the failing job versions and recurring error class within the incident interval. Observed problem: A training fleet runs many jobs and operators manually search thousands of unstructured log files to locate recurring data-channel failures. Operational setting: During a production MLOps reliability and security review.

D:

The chosen fix reduces measured end-to-end p95 latency and component metrics explain the change. This could validate cloudwatch invocations and modellatency distinction, but it does not establish that cloudwatch logs insights error correlation is resolved for this workload. Confirm instead: A query isolates the failing job versions and recurring error class within the incident interval. Observed problem: A training fleet runs many jobs and operators manually search thousands of unstructured log files to locate recurring data-channel failures. Operational setting: During a production MLOps reliability and security review.

Question 756

During an approved rollout of an AWS ML inference workload, the following condition is observed: A platform maintains hundreds of low-traffic similar models and deploys each to a dedicated always-running instance, causing high idle cost. The team must meet its documented availability and rollback constraints. Which TWO steps best establish the evidence and correct the identified root cause? Select TWO.

  1. Add schema, integration and sample endpoint inference tests to the ML build and deployment pipeline.
  2. Use a compatible SageMaker multi-model endpoint with managed model loading and monitor cache/eviction behavior.
  3. Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs.
  4. Compile the supported model for the specific edge target using SageMaker Neo or choose a compatible conversion route.
  5. Inspect model sizes, framework compatibility, per-model request rates, load latency, and isolation requirements.

Explanation

Correct Answers

B:

Use a compatible SageMaker multi-model endpoint with managed model loading and monitor cache/eviction behavior. This is the appropriate controlled remedy for multi-model endpoint hosting tradeoff. Multi-model hosting shares inference compute but can incur cache misses and is unsuitable when models require incompatible runtimes. Verify the cause with: Inspect model sizes, framework compatibility, per-model request rates, load latency, and isolation requirements. Then confirm: Distinct requested model IDs return correct predictions with acceptable cold load latency and lower aggregate idle cost. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A platform maintains hundreds of low-traffic similar models and deploys each to a dedicated always-running instance, causing high idle cost. Operational setting: During an approved rollout of an AWS ML inference workload.

E:

Inspect model sizes, framework compatibility, per-model request rates, load latency, and isolation requirements. This directly tests multi-model endpoint hosting tradeoff in the reported AWS ML workflow. Multi-model hosting shares inference compute but can incur cache misses and is unsuitable when models require incompatible runtimes. It distinguishes the problem before choosing a change. The related targeted response is: Use a compatible SageMaker multi-model endpoint with managed model loading and monitor cache/eviction behavior. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A platform maintains hundreds of low-traffic similar models and deploys each to a dedicated always-running instance, causing high idle cost. Operational setting: During an approved rollout of an AWS ML inference workload.

Incorrect Answers

A:

Add schema, integration and sample endpoint inference tests to the ML build and deployment pipeline. This selection concerns continuous integration unit and endpoint contract tests rather than the required diagnostic-and-remedy pair for multi-model endpoint hosting tradeoff. Use evidence: Inspect model sizes, framework compatibility, per-model request rates, load latency, and isolation requirements. and the matching correction: Use a compatible SageMaker multi-model endpoint with managed model loading and monitor cache/eviction behavior. Signal: A platform maintains hundreds of low-traffic similar models and deploys each to a dedicated always-running instance, causing high idle cost. Operational setting: During an approved rollout of an AWS ML inference workload.

C:

Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs. This selection concerns sagemaker vpc endpoint access for private artifacts rather than the required diagnostic-and-remedy pair for multi-model endpoint hosting tradeoff. Use evidence: Inspect model sizes, framework compatibility, per-model request rates, load latency, and isolation requirements. and the matching correction: Use a compatible SageMaker multi-model endpoint with managed model loading and monitor cache/eviction behavior. Signal: A platform maintains hundreds of low-traffic similar models and deploys each to a dedicated always-running instance, causing high idle cost. Operational setting: During an approved rollout of an AWS ML inference workload.

D:

Compile the supported model for the specific edge target using SageMaker Neo or choose a compatible conversion route. This selection concerns sagemaker neo edge compiler compatibility rather than the required diagnostic-and-remedy pair for multi-model endpoint hosting tradeoff. Use evidence: Inspect model sizes, framework compatibility, per-model request rates, load latency, and isolation requirements. and the matching correction: Use a compatible SageMaker multi-model endpoint with managed model loading and monitor cache/eviction behavior. Signal: A platform maintains hundreds of low-traffic similar models and deploys each to a dedicated always-running instance, causing high idle cost. Operational setting: During an approved rollout of an AWS ML inference workload.

Question 757

While reproducing the alert in an isolated AWS ML integration account, the following condition is observed: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. The proposed change must preserve logging and least privilege. Which observation most directly identifies the root cause of the reported behavior?

  1. Inspect tuning max jobs and parallel jobs, usage forecasts, AWS Budgets thresholds, and quota settings.
  2. Inspect subnet routes, VPC interface endpoints, private DNS settings, endpoint security groups, and endpoint policies.
  3. Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence.
  4. Compare probability calibration plots, Brier score and event rates across recent labeled cohorts.

Explanation

Correct Answer

C:

Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. This directly tests cross-account s3 bucket exfiltration protection in the reported AWS ML workflow. Least privilege must constrain the destination resource; an unrestricted object-write policy can enable data exfiltration. It distinguishes the problem before choosing a change. The related targeted response is: Restrict writes to approved bucket prefixes and apply appropriate resource and organizational guardrails. Reported signal: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: While reproducing the alert in an isolated AWS ML integration account.

Incorrect Answers

A:

Inspect tuning max jobs and parallel jobs, usage forecasts, AWS Budgets thresholds, and quota settings. This is a possible diagnostic for aws budgets spend threshold for experimentation, but it does not directly test the cross-account s3 bucket exfiltration protection failure reported here. Prioritize: Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. The relevant case is: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: While reproducing the alert in an isolated AWS ML integration account.

B:

Inspect subnet routes, VPC interface endpoints, private DNS settings, endpoint security groups, and endpoint policies. This is a possible diagnostic for private vpc endpoint policy for sagemaker apis, but it does not directly test the cross-account s3 bucket exfiltration protection failure reported here. Prioritize: Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. The relevant case is: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: While reproducing the alert in an isolated AWS ML integration account.

D:

Compare probability calibration plots, Brier score and event rates across recent labeled cohorts. This is a possible diagnostic for serving output confidence calibration drift, but it does not directly test the cross-account s3 bucket exfiltration protection failure reported here. Prioritize: Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. The relevant case is: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: While reproducing the alert in an isolated AWS ML integration account.

Question 758

During a production MLOps reliability and security review, the following condition is observed: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. The owner needs an auditable resolution without broadening privileges. Select TWO: the appropriate diagnostic check and the targeted implementation change.

  1. Use approved SageMaker interface endpoints and relevant private DNS and policy settings for required API access.
  2. Enable appropriate CloudTrail S3 data events for the sensitive dataset with protected storage and retention.
  3. Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls.
  4. Apply consistent approved cost allocation tags to ML jobs and supported linked resources and activate relevant reporting.
  5. Inspect async inference backlog size, age of oldest request, worker capacity and completion/error metrics.

Explanation

Correct Answers

B:

Enable appropriate CloudTrail S3 data events for the sensitive dataset with protected storage and retention. This is the appropriate controlled remedy for cloudtrail training data access audit coverage. CloudTrail management events do not by default include every S3 object read; data-event selection provides that visibility. Verify the cause with: Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. Then confirm: An authorized training read emits attributable S3 object-access events while alerting detects unexpected access. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.

C:

Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. This directly tests cloudtrail training data access audit coverage in the reported AWS ML workflow. CloudTrail management events do not by default include every S3 object read; data-event selection provides that visibility. It distinguishes the problem before choosing a change. The related targeted response is: Enable appropriate CloudTrail S3 data events for the sensitive dataset with protected storage and retention. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.

Incorrect Answers

A:

Use approved SageMaker interface endpoints and relevant private DNS and policy settings for required API access. This selection concerns private vpc endpoint policy for sagemaker apis rather than the required diagnostic-and-remedy pair for cloudtrail training data access audit coverage. Use evidence: Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. and the matching correction: Enable appropriate CloudTrail S3 data events for the sensitive dataset with protected storage and retention. Signal: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.

D:

Apply consistent approved cost allocation tags to ML jobs and supported linked resources and activate relevant reporting. This selection concerns tag-based ml training cost attribution rather than the required diagnostic-and-remedy pair for cloudtrail training data access audit coverage. Use evidence: Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. and the matching correction: Enable appropriate CloudTrail S3 data events for the sensitive dataset with protected storage and retention. Signal: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.

E:

Inspect async inference backlog size, age of oldest request, worker capacity and completion/error metrics. This selection concerns asynchronous inference queue backlog alert rather than the required diagnostic-and-remedy pair for cloudtrail training data access audit coverage. Use evidence: Inspect CloudTrail management events, data event selectors, S3 bucket coverage, and log retention controls. and the matching correction: Enable appropriate CloudTrail S3 data events for the sensitive dataset with protected storage and retention. Signal: A compliance reviewer can see SageMaker CreateTrainingJob API calls but not object-level reads from the sensitive S3 training dataset. Operational setting: During a production MLOps reliability and security review.

Question 759

At a production AWS ML data lake supporting customer-facing predictions, the following condition is observed: An overnight ML export runs expensive full-table queries on a production RDS database and causes application transaction latency spikes. Engineers must avoid changing unrelated source partitions. Which engineering response resolves the actual issue without masking the symptoms?

  1. Revise instructions, route ambiguous samples for expert adjudication, and monitor label quality per class.
  2. Measure label distribution differences with an appropriate pretraining bias metric and improve data representation before training.
  3. Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features.
  4. Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target.

Explanation

Correct Answer

D:

Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target. This is the appropriate controlled remedy for rds extraction overload into ml. Extract jobs contend with transactional queries; moving or bounding reads can isolate production workloads. Verify the cause with: Correlate export query plans, RDS CPU and IOPS, replication lag, and business traffic windows. Then confirm: Application p95 latency returns to target while exported records meet a measured completeness and staleness objective. Reported signal: An overnight ML export runs expensive full-table queries on a production RDS database and causes application transaction latency spikes. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

Incorrect Answers

A:

Revise instructions, route ambiguous samples for expert adjudication, and monitor label quality per class. This addresses a different issue involving ground truth labeling agreement review. It does not correct the stated rds extraction overload into ml mechanism. The targeted response is: Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target. Case evidence: An overnight ML export runs expensive full-table queries on a production RDS database and causes application transaction latency spikes. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

B:

Measure label distribution differences with an appropriate pretraining bias metric and improve data representation before training. This addresses a different issue involving clarify label imbalance measurement. It does not correct the stated rds extraction overload into ml mechanism. The targeted response is: Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target. Case evidence: An overnight ML export runs expensive full-table queries on a production RDS database and causes application transaction latency spikes. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

C:

Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features. This addresses a different issue involving glue schema evolution with mixed input types. It does not correct the stated rds extraction overload into ml mechanism. The targeted response is: Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target. Case evidence: An overnight ML export runs expensive full-table queries on a production RDS database and causes application transaction latency spikes. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.

Question 760

While reproducing a training incident in an independent SageMaker experiment, the following condition is observed: A support team needs text classification using labeled messages, but engineers choose a clustering algorithm that produces no class-specific predictions. The experiment must be compared fairly against its prior baseline. What should the ML engineer inspect FIRST to distinguish this failure from unrelated issues?

  1. Compare training and validation curves, coefficient magnitudes, and error by split.
  2. Inspect target types, business loss function, sample labels, and whether the required output is continuous or categorical.
  3. Inspect tensor summaries, gradient magnitudes, learning-rate schedule, and training loss anomalies with supported debugging hooks.
  4. Inspect the supervised labels, text representation, model-input format, and the desired classification output.

Explanation

Correct Answer

D:

Inspect the supervised labels, text representation, model-input format, and the desired classification output. This directly tests sagemaker built-in blazingtext choice in the reported AWS ML workflow. Supervised text classification requires labels and task-specific evaluation rather than unlabeled similarity clusters. It distinguishes the problem before choosing a change. The related targeted response is: Use an appropriate text classification model or supported SageMaker BlazingText supervised approach with validated labels. Reported signal: A support team needs text classification using labeled messages, but engineers choose a clustering algorithm that produces no class-specific predictions. Operational setting: While reproducing a training incident in an independent SageMaker experiment.

Incorrect Answers

A:

Compare training and validation curves, coefficient magnitudes, and error by split. This is a possible diagnostic for overfitting reduced with l2 regularization, but it does not directly test the sagemaker built-in blazingtext choice failure reported here. Prioritize: Inspect the supervised labels, text representation, model-input format, and the desired classification output. The relevant case is: A support team needs text classification using labeled messages, but engineers choose a clustering algorithm that produces no class-specific predictions. Operational setting: While reproducing a training incident in an independent SageMaker experiment.

B:

Inspect target types, business loss function, sample labels, and whether the required output is continuous or categorical. This is a possible diagnostic for regression versus classification problem formulation, but it does not directly test the sagemaker built-in blazingtext choice failure reported here. Prioritize: Inspect the supervised labels, text representation, model-input format, and the desired classification output. The relevant case is: A support team needs text classification using labeled messages, but engineers choose a clustering algorithm that produces no class-specific predictions. Operational setting: While reproducing a training incident in an independent SageMaker experiment.

C:

Inspect tensor summaries, gradient magnitudes, learning-rate schedule, and training loss anomalies with supported debugging hooks. This is a possible diagnostic for model debugger exploding gradient diagnosis, but it does not directly test the sagemaker built-in blazingtext choice failure reported here. Prioritize: Inspect the supervised labels, text representation, model-input format, and the desired classification output. The relevant case is: A support team needs text classification using labeled messages, but engineers choose a clustering algorithm that produces no class-specific predictions. Operational setting: While reproducing a training incident in an independent SageMaker experiment.

AWS Certified Machine Learning Engineer - Associate MLA-C01 Practice Tests