Amazon AWS Certified Machine Learning Engineer - Associate MLA-C01 Practice Test 78
Question 770
During a production MLOps reliability and security review, the following condition is observed: An unconstrained SageMaker tuning experiment launches hundreds of expensive GPU jobs, but the team notices the bill only at month end. The owner needs an auditable resolution without broadening privileges. Which investigation provides the most decisive FIRST evidence for the underlying problem?
- Compare probability calibration plots, Brier score and event rates across recent labeled cohorts.
- Inspect endpoint 5XXErrors, InvocationsPerInstance, instance availability, and per-minute latency distribution.
- Inspect tuning max jobs and parallel jobs, usage forecasts, AWS Budgets thresholds, and quota settings.
- Inspect caller identity, pass-role resource ARN, service constraint, and denied event attributes.
Explanation
Correct Answer
C:Inspect tuning max jobs and parallel jobs, usage forecasts, AWS Budgets thresholds, and quota settings. This directly tests aws budgets spend threshold for experimentation in the reported AWS ML workflow. Budgets detect or warn about costs but do not automatically limit every ML training request; job limits are also needed. It distinguishes the problem before choosing a change. The related targeted response is: Set budget alerts and bounded tuning job quotas before launching experiments, and enforce an owner-approved stopping policy. Reported signal: An unconstrained SageMaker tuning experiment launches hundreds of expensive GPU jobs, but the team notices the bill only at month end. Operational setting: During a production MLOps reliability and security review.
Incorrect Answers
A:Compare probability calibration plots, Brier score and event rates across recent labeled cohorts. This is a possible diagnostic for serving output confidence calibration drift, but it does not directly test the aws budgets spend threshold for experimentation failure reported here. Prioritize: Inspect tuning max jobs and parallel jobs, usage forecasts, AWS Budgets thresholds, and quota settings. The relevant case is: An unconstrained SageMaker tuning experiment launches hundreds of expensive GPU jobs, but the team notices the bill only at month end. Operational setting: During a production MLOps reliability and security review.
B:Inspect endpoint 5XXErrors, InvocationsPerInstance, instance availability, and per-minute latency distribution. This is a possible diagnostic for cloudwatch 5xxerrors endpoint saturation, but it does not directly test the aws budgets spend threshold for experimentation failure reported here. Prioritize: Inspect tuning max jobs and parallel jobs, usage forecasts, AWS Budgets thresholds, and quota settings. The relevant case is: An unconstrained SageMaker tuning experiment launches hundreds of expensive GPU jobs, but the team notices the bill only at month end. Operational setting: During a production MLOps reliability and security review.
D:Inspect caller identity, pass-role resource ARN, service constraint, and denied event attributes. This is a possible diagnostic for iam passrole constraint for model deployment, but it does not directly test the aws budgets spend threshold for experimentation failure reported here. Prioritize: Inspect tuning max jobs and parallel jobs, usage forecasts, AWS Budgets thresholds, and quota settings. The relevant case is: An unconstrained SageMaker tuning experiment launches hundreds of expensive GPU jobs, but the team notices the bill only at month end. Operational setting: During a production MLOps reliability and security review.
Question 771
During a controlled replay of the data-preparation workflow in a separate ML staging account, the following condition is observed: A real-time feature consumer lags only for one tenant because producers use the same partition key for most high-volume events. The dataset contract must remain reproducible for a backfill. What targeted change should be implemented after verifying the stated cause?
- Revise instructions, route ambiguous samples for expert adjudication, and monitor label quality per class.
- Choose partition keys with enough cardinality or reshard the stream for the intended throughput, while preserving required per-key ordering.
- Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required.
- Use rolling-origin or chronological validation with strictly past-derived features and appropriate forecast horizons.
Explanation
Correct Answer
B:Choose partition keys with enough cardinality or reshard the stream for the intended throughput, while preserving required per-key ordering. This is the appropriate controlled remedy for kinesis data streams shard hot key. Kinesis shard throughput is bounded; a hot partition key can overload one shard despite spare total stream capacity. Verify the cause with: Compare per-shard incoming records, write throttles, partition-key cardinality, and enhanced fan-out consumer lag. Then confirm: Write throttles and iterator age fall under burst load without losing required ordering for related records. Reported signal: A real-time feature consumer lags only for one tenant because producers use the same partition key for most high-volume events. Operational setting: During a controlled replay of the data-preparation workflow in a separate ML staging account.
Incorrect Answers
A:Revise instructions, route ambiguous samples for expert adjudication, and monitor label quality per class. This addresses a different issue involving ground truth labeling agreement review. It does not correct the stated kinesis data streams shard hot key mechanism. The targeted response is: Choose partition keys with enough cardinality or reshard the stream for the intended throughput, while preserving required per-key ordering. Case evidence: A real-time feature consumer lags only for one tenant because producers use the same partition key for most high-volume events. Operational setting: During a controlled replay of the data-preparation workflow in a separate ML staging account.
C:Preserve the intended bookmark state across deployments and run an explicit controlled backfill only when required. This addresses a different issue involving glue job bookmark state error. It does not correct the stated kinesis data streams shard hot key mechanism. The targeted response is: Choose partition keys with enough cardinality or reshard the stream for the intended throughput, while preserving required per-key ordering. Case evidence: A real-time feature consumer lags only for one tenant because producers use the same partition key for most high-volume events. Operational setting: During a controlled replay of the data-preparation workflow in a separate ML staging account.
D:Use rolling-origin or chronological validation with strictly past-derived features and appropriate forecast horizons. This addresses a different issue involving chronological split for forecast evaluation. It does not correct the stated kinesis data streams shard hot key mechanism. The targeted response is: Choose partition keys with enough cardinality or reshard the stream for the intended throughput, while preserving required per-key ordering. Case evidence: A real-time feature consumer lags only for one tenant because producers use the same partition key for most high-volume events. Operational setting: During a controlled replay of the data-preparation workflow in a separate ML staging account.
Question 772
During an operational load and release rehearsal for SageMaker-hosted inference, the following condition is observed: An online classifier faces bursty demand and latency spikes because auto scaling tracks host CPU while requests spend most time waiting for accelerated inference. Change control requires measurable endpoint or pipeline acceptance evidence. Which investigation provides the most decisive FIRST evidence for the underlying problem?
- Compare invocation count per instance, model latency, GPU utilization, and the behavior of current scaling policy.
- Inspect ECR image digest, tag history, pipeline manifests, and built-image package inventory.
- Profile request arrival intervals, cold-start tolerance, memory needs, and compatible serverless inference limits.
- Inspect model registry package versions, approval metadata, artifact hashes, and pipeline deployment inputs.
Explanation
Correct Answer
A:Compare invocation count per instance, model latency, GPU utilization, and the behavior of current scaling policy. This directly tests sagemaker endpoint auto scaling metric selection in the reported AWS ML workflow. CPU percentage can be poorly correlated with accelerator-bound inference demand; scale on a meaningful signal. It distinguishes the problem before choosing a change. The related targeted response is: Configure a justified endpoint variant auto scaling policy using a workload-relevant supported metric such as invocations per instance. Reported signal: An online classifier faces bursty demand and latency spikes because auto scaling tracks host CPU while requests spend most time waiting for accelerated inference. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
Incorrect Answers
B:Inspect ECR image digest, tag history, pipeline manifests, and built-image package inventory. This is a possible diagnostic for ecr immutable image digest for inference, but it does not directly test the sagemaker endpoint auto scaling metric selection failure reported here. Prioritize: Compare invocation count per instance, model latency, GPU utilization, and the behavior of current scaling policy. The relevant case is: An online classifier faces bursty demand and latency spikes because auto scaling tracks host CPU while requests spend most time waiting for accelerated inference. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
C:Profile request arrival intervals, cold-start tolerance, memory needs, and compatible serverless inference limits. This is a possible diagnostic for serverless inference for intermittent requests, but it does not directly test the sagemaker endpoint auto scaling metric selection failure reported here. Prioritize: Compare invocation count per instance, model latency, GPU utilization, and the behavior of current scaling policy. The relevant case is: An online classifier faces bursty demand and latency spikes because auto scaling tracks host CPU while requests spend most time waiting for accelerated inference. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
D:Inspect model registry package versions, approval metadata, artifact hashes, and pipeline deployment inputs. This is a possible diagnostic for model registry version promotion provenance, but it does not directly test the sagemaker endpoint auto scaling metric selection failure reported here. Prioritize: Compare invocation count per instance, model latency, GPU utilization, and the behavior of current scaling policy. The relevant case is: An online classifier faces bursty demand and latency spikes because auto scaling tracks host CPU while requests spend most time waiting for accelerated inference. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
Question 773
During production evaluation of a SageMaker AI model candidate, the following condition is observed: An invoice project needs typed text extracted from scanned forms but begins collecting millions of labels to train a custom generic vision encoder. The release is blocked until the underlying model behavior is understood. Which verification result BEST demonstrates that the issue is resolved?
- Multiple workers reduce epoch time with acceptable convergence and measured communication overhead.
- A model returns calibrated numerical amounts and is evaluated against continuous target error on held-out records.
- A representative invoice set yields usable structured fields with measured extraction quality and minimal custom training.
- Candidate comparisons reference equivalent datasets and metrics and can be rerun from stored lineage.
Explanation
Correct Answer
C:A representative invoice set yields usable structured fields with measured extraction quality and minimal custom training. This is the acceptance evidence for the described managed ai service versus custom ocr model scenario. Managed document extraction can solve standard OCR and key-value needs without owning an entire model-training pipeline. The corrective implementation it validates is: Evaluate Amazon Textract form and table extraction first, adding custom processing only for unsupported fields. Reported signal: An invoice project needs typed text extracted from scanned forms but begins collecting millions of labels to train a custom generic vision encoder. Operational setting: During production evaluation of a SageMaker AI model candidate.
Incorrect Answers
A:Multiple workers reduce epoch time with acceptable convergence and measured communication overhead. This could validate data parallelism versus model parallelism, but it does not establish that managed ai service versus custom ocr model is resolved for this workload. Confirm instead: A representative invoice set yields usable structured fields with measured extraction quality and minimal custom training. Observed problem: An invoice project needs typed text extracted from scanned forms but begins collecting millions of labels to train a custom generic vision encoder. Operational setting: During production evaluation of a SageMaker AI model candidate.
B:A model returns calibrated numerical amounts and is evaluated against continuous target error on held-out records. This could validate regression versus classification problem formulation, but it does not establish that managed ai service versus custom ocr model is resolved for this workload. Confirm instead: A representative invoice set yields usable structured fields with measured extraction quality and minimal custom training. Observed problem: An invoice project needs typed text extracted from scanned forms but begins collecting millions of labels to train a custom generic vision encoder. Operational setting: During production evaluation of a SageMaker AI model candidate.
D:Candidate comparisons reference equivalent datasets and metrics and can be rerun from stored lineage. This could validate reproducible sagemaker experiments comparisons, but it does not establish that managed ai service versus custom ocr model is resolved for this workload. Confirm instead: A representative invoice set yields usable structured fields with measured extraction quality and minimal custom training. Observed problem: An invoice project needs typed text extracted from scanned forms but begins collecting millions of labels to train a custom generic vision encoder. Operational setting: During production evaluation of a SageMaker AI model candidate.
Question 774
During a production MLOps reliability and security review, the following condition is observed: A real-time recommender fetches cached customer history updated hourly while offline training used a daily snapshot with different aggregation boundaries. The owner needs an auditable resolution without broadening privileges. What targeted change should be implemented after verifying the stated cause?
- Scale compatible asynchronous inference capacity or tune workload and queue alarms for pending-request age.
- Configure data capture and an appropriate Model Monitor baseline with scheduled data-quality checks.
- Set budget alerts and bounded tuning job quotas before launching experiments, and enforce an owner-approved stopping policy.
- Use a consistent versioned feature definition and test offline/online values at the same observation cutoff.
Explanation
Correct Answer
D:Use a consistent versioned feature definition and test offline/online values at the same observation cutoff. This is the appropriate controlled remedy for training-serving feature skew incident. Mismatched feature windows and update cadence can degrade production predictions even if training accuracy is stable. Verify the cause with: Inspect online versus offline feature computation code, event-time cutoffs, freshness, and sampled entity values. Then confirm: Parity checks match transformations within documented freshness tolerances for test entities. Reported signal: A real-time recommender fetches cached customer history updated hourly while offline training used a daily snapshot with different aggregation boundaries. Operational setting: During a production MLOps reliability and security review.
Incorrect Answers
A:Scale compatible asynchronous inference capacity or tune workload and queue alarms for pending-request age. This addresses a different issue involving asynchronous inference queue backlog alert. It does not correct the stated training-serving feature skew incident mechanism. The targeted response is: Use a consistent versioned feature definition and test offline/online values at the same observation cutoff. Case evidence: A real-time recommender fetches cached customer history updated hourly while offline training used a daily snapshot with different aggregation boundaries. Operational setting: During a production MLOps reliability and security review.
B:Configure data capture and an appropriate Model Monitor baseline with scheduled data-quality checks. This addresses a different issue involving sagemaker model monitor feature drift baseline. It does not correct the stated training-serving feature skew incident mechanism. The targeted response is: Use a consistent versioned feature definition and test offline/online values at the same observation cutoff. Case evidence: A real-time recommender fetches cached customer history updated hourly while offline training used a daily snapshot with different aggregation boundaries. Operational setting: During a production MLOps reliability and security review.
C:Set budget alerts and bounded tuning job quotas before launching experiments, and enforce an owner-approved stopping policy. This addresses a different issue involving aws budgets spend threshold for experimentation. It does not correct the stated training-serving feature skew incident mechanism. The targeted response is: Use a consistent versioned feature definition and test offline/online values at the same observation cutoff. Case evidence: A real-time recommender fetches cached customer history updated hourly while offline training used a daily snapshot with different aggregation boundaries. Operational setting: During a production MLOps reliability and security review.
Question 775
As a regional data-pipeline rollout is validated against approved AWS storage and streams, the following condition is observed: New event producers change a numerical source field to strings while legacy objects remain numeric, causing the shared Glue transformation to fail. The data team must preserve event-time meaning and lineage. Select TWO: the appropriate diagnostic check and the targeted implementation change.
- Inspect shared entity identifiers across partitions and compare patient-level versus image-level evaluation results.
- Compare source schemas by partition, Glue Data Catalog types, and failed cast rows for the evolving field.
- Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features.
- Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target.
- Enforce a required non-null or uniqueness contract with thresholds; quarantine violating partitions before feature publication.
Explanation
Correct Answers
B:Compare source schemas by partition, Glue Data Catalog types, and failed cast rows for the evolving field. This directly tests glue schema evolution with mixed input types in the reported AWS ML workflow. A catalog entry does not automatically reconcile incompatible field types across all source partitions. It distinguishes the problem before choosing a change. The related targeted response is: Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: New event producers change a numerical source field to strings while legacy objects remain numeric, causing the shared Glue transformation to fail. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
C:Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features. This is the appropriate controlled remedy for glue schema evolution with mixed input types. A catalog entry does not automatically reconcile incompatible field types across all source partitions. Verify the cause with: Compare source schemas by partition, Glue Data Catalog types, and failed cast rows for the evolving field. Then confirm: Both supported source versions produce the agreed typed feature, and invalid values enter an auditable reject path. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: New event producers change a numerical source field to strings while legacy objects remain numeric, causing the shared Glue transformation to fail. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
Incorrect Answers
A:Inspect shared entity identifiers across partitions and compare patient-level versus image-level evaluation results. This selection concerns group-leakage train and validation split rather than the required diagnostic-and-remedy pair for glue schema evolution with mixed input types. Use evidence: Compare source schemas by partition, Glue Data Catalog types, and failed cast rows for the evolving field. and the matching correction: Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features. Signal: New event producers change a numerical source field to strings while legacy objects remain numeric, causing the shared Glue transformation to fail. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
D:Use controlled incremental extraction or a suitable read replica and throttle export jobs within the approved data freshness target. This selection concerns rds extraction overload into ml rather than the required diagnostic-and-remedy pair for glue schema evolution with mixed input types. Use evidence: Compare source schemas by partition, Glue Data Catalog types, and failed cast rows for the evolving field. and the matching correction: Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features. Signal: New event producers change a numerical source field to strings while legacy objects remain numeric, causing the shared Glue transformation to fail. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
E:Enforce a required non-null or uniqueness contract with thresholds; quarantine violating partitions before feature publication. This selection concerns glue data quality non-null contract rather than the required diagnostic-and-remedy pair for glue schema evolution with mixed input types. Use evidence: Compare source schemas by partition, Glue Data Catalog types, and failed cast rows for the evolving field. and the matching correction: Define explicit compatible conversions and schema contracts, isolate incompatible versions, and validate before publishing features. Signal: New event producers change a numerical source field to strings while legacy objects remain numeric, causing the shared Glue transformation to fail. Operational setting: As a regional data-pipeline rollout is validated against approved AWS storage and streams.
Question 776
While testing a second region for recoverable deployment of the same ML service, the following condition is observed: An inference service needs a separate preprocessing transform before a predictor, but the team inserts inconsistent transformation code into many client applications. The deployment must be reproducible without manual console-only fixes. Which TWO complementary choices provide the decisive diagnosis AND corrective response? Select TWO.
- Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs.
- Implement the SageMaker inference container
/ping and /invocations expectations or use a supported serving toolkit. - Inspect preprocessing version drift, input/output contracts, and the selected hosting container topology.
- Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing.
- Use SageMaker Serverless Inference where the model and latency envelope fit, or justify provisioned capacity if it does not.
Explanation
Correct Answers
C:Inspect preprocessing version drift, input/output contracts, and the selected hosting container topology. This directly tests multi-container inference pipeline responsibilities in the reported AWS ML workflow. A managed inference pipeline chains preprocessing and prediction steps consistently, reducing client-side skew. It distinguishes the problem before choosing a change. The related targeted response is: Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: An inference service needs a separate preprocessing transform before a predictor, but the team inserts inconsistent transformation code into many client applications. Operational setting: While testing a second region for recoverable deployment of the same ML service.
D:Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing. This is the appropriate controlled remedy for multi-container inference pipeline responsibilities. A managed inference pipeline chains preprocessing and prediction steps consistently, reducing client-side skew. Verify the cause with: Inspect preprocessing version drift, input/output contracts, and the selected hosting container topology. Then confirm: The endpoint applies the same preprocessor to every client request and produces the expected model input schema. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: An inference service needs a separate preprocessing transform before a predictor, but the team inserts inconsistent transformation code into many client applications. Operational setting: While testing a second region for recoverable deployment of the same ML service.
Incorrect Answers
A:Inspect route tables, S3 VPC endpoint association, security policies, endpoint policies, and S3 access logs. This selection concerns sagemaker vpc endpoint access for private artifacts rather than the required diagnostic-and-remedy pair for multi-container inference pipeline responsibilities. Use evidence: Inspect preprocessing version drift, input/output contracts, and the selected hosting container topology. and the matching correction: Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing. Signal: An inference service needs a separate preprocessing transform before a predictor, but the team inserts inconsistent transformation code into many client applications. Operational setting: While testing a second region for recoverable deployment of the same ML service.
B:Implement the SageMaker inference container /ping and /invocations expectations or use a supported serving toolkit. This selection concerns bring-your-own-inference-container contract rather than the required diagnostic-and-remedy pair for multi-container inference pipeline responsibilities. Use evidence: Inspect preprocessing version drift, input/output contracts, and the selected hosting container topology. and the matching correction: Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing. Signal: An inference service needs a separate preprocessing transform before a predictor, but the team inserts inconsistent transformation code into many client applications. Operational setting: While testing a second region for recoverable deployment of the same ML service.
E:Use SageMaker Serverless Inference where the model and latency envelope fit, or justify provisioned capacity if it does not. This selection concerns serverless inference for intermittent requests rather than the required diagnostic-and-remedy pair for multi-container inference pipeline responsibilities. Use evidence: Inspect preprocessing version drift, input/output contracts, and the selected hosting container topology. and the matching correction: Use a compatible SageMaker inference pipeline with ordered containers or a single packaged equivalent for shared preprocessing. Signal: An inference service needs a separate preprocessing transform before a predictor, but the team inserts inconsistent transformation code into many client applications. Operational setting: While testing a second region for recoverable deployment of the same ML service.
Question 777
At a production AWS ML data lake supporting customer-facing predictions, the following condition is observed: A customer-support labeling dataset includes raw email addresses and account identifiers that external annotators do not need. Engineers must avoid changing unrelated source partitions. What postchange observation provides the strongest acceptance evidence?
- Concurrent workers observe consistent supported shared-file operations and training artifact delivery remains durable.
- Annotation workers can label required content without viewing direct identifiers and authorized audits can trace approved mappings.
- The transformed distribution is less skewed and inference uses identical guarded transformations.
- The report quantifies class or group imbalance with reproducible group counts and documents remediation assumptions.
Explanation
Correct Answer
B:Annotation workers can label required content without viewing direct identifiers and authorized audits can trace approved mappings. This is the acceptance evidence for the described pii masking before model labeling scenario. Data minimization applies before external labeling; encryption in transit does not remove unnecessary sensitive content from the task. The corrective implementation it validates is: Remove or pseudonymize unnecessary PII before annotation and restrict access to the token mapping under separate controls. Reported signal: A customer-support labeling dataset includes raw email addresses and account identifiers that external annotators do not need. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
Incorrect Answers
A:Concurrent workers observe consistent supported shared-file operations and training artifact delivery remains durable. This could validate s3 versus efs training storage choice, but it does not establish that pii masking before model labeling is resolved for this workload. Confirm instead: Annotation workers can label required content without viewing direct identifiers and authorized audits can trace approved mappings. Observed problem: A customer-support labeling dataset includes raw email addresses and account identifiers that external annotators do not need. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
C:The transformed distribution is less skewed and inference uses identical guarded transformations. This could validate skewed numerical feature log transformation, but it does not establish that pii masking before model labeling is resolved for this workload. Confirm instead: Annotation workers can label required content without viewing direct identifiers and authorized audits can trace approved mappings. Observed problem: A customer-support labeling dataset includes raw email addresses and account identifiers that external annotators do not need. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
D:The report quantifies class or group imbalance with reproducible group counts and documents remediation assumptions. This could validate clarify label imbalance measurement, but it does not establish that pii masking before model labeling is resolved for this workload. Confirm instead: Annotation workers can label required content without viewing direct identifiers and authorized audits can trace approved mappings. Observed problem: A customer-support labeling dataset includes raw email addresses and account identifiers that external annotators do not need. Operational setting: At a production AWS ML data lake supporting customer-facing predictions.
Question 778
As a regulated ML workload prepares for an automated regional rollout, the following condition is observed: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. The team must demonstrate a repeatable monitoring or security control. Which investigation provides the most decisive FIRST evidence for the underlying problem?
- Inspect endpoint 5XXErrors, InvocationsPerInstance, instance availability, and per-minute latency distribution.
- Inspect inference timestamps, eventual ground-truth arrival, join keys, and the provenance of displayed quality metrics.
- Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence.
- Inspect caller identity, pass-role resource ARN, service constraint, and denied event attributes.
Explanation
Correct Answer
C:Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. This directly tests cross-account s3 bucket exfiltration protection in the reported AWS ML workflow. Least privilege must constrain the destination resource; an unrestricted object-write policy can enable data exfiltration. It distinguishes the problem before choosing a change. The related targeted response is: Restrict writes to approved bucket prefixes and apply appropriate resource and organizational guardrails. Reported signal: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
Incorrect Answers
A:Inspect endpoint 5XXErrors, InvocationsPerInstance, instance availability, and per-minute latency distribution. This is a possible diagnostic for cloudwatch 5xxerrors endpoint saturation, but it does not directly test the cross-account s3 bucket exfiltration protection failure reported here. Prioritize: Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. The relevant case is: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
B:Inspect inference timestamps, eventual ground-truth arrival, join keys, and the provenance of displayed quality metrics. This is a possible diagnostic for target-label delay in production quality monitoring, but it does not directly test the cross-account s3 bucket exfiltration protection failure reported here. Prioritize: Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. The relevant case is: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
D:Inspect caller identity, pass-role resource ARN, service constraint, and denied event attributes. This is a possible diagnostic for iam passrole constraint for model deployment, but it does not directly test the cross-account s3 bucket exfiltration protection failure reported here. Prioritize: Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. The relevant case is: An ML pipeline in one account is allowed to write model predictions to an unapproved external bucket because its role has overly broad s3:PutObject access. Operational setting: As a regulated ML workload prepares for an automated regional rollout.
Question 779
During an operational load and release rehearsal for SageMaker-hosted inference, the following condition is observed: A real-time ML service is configured for very low baseline capacity but traffic can surge tenfold within seconds, exhausting available instance capacity. Change control requires measurable endpoint or pipeline acceptance evidence. Select TWO: the appropriate diagnostic check and the targeted implementation change.
- Inspect service quotas, minimum and maximum endpoint capacity, scaling cooldowns, startup time, and burst size.
- Configure supported provisioned concurrency for the latency-critical interval or switch to provisioned real-time hosting if justified.
- Inspect versioned request schema, unit-test coverage, container
/invocations behavior, and pipeline gate logs. - Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp.
- Keep the blue environment available until green health gates pass and automate traffic rollback on failed alarms.
Explanation
Correct Answers
A:Inspect service quotas, minimum and maximum endpoint capacity, scaling cooldowns, startup time, and burst size. This directly tests endpoint scale-to-zero cold capacity planning in the reported AWS ML workflow. Reactive scaling takes time and is bounded by quotas; zero spare capacity may not absorb an instantaneous burst. It distinguishes the problem before choosing a change. The related targeted response is: Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A real-time ML service is configured for very low baseline capacity but traffic can surge tenfold within seconds, exhausting available instance capacity. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
D:Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp. This is the appropriate controlled remedy for endpoint scale-to-zero cold capacity planning. Reactive scaling takes time and is bounded by quotas; zero spare capacity may not absorb an instantaneous burst. Verify the cause with: Inspect service quotas, minimum and maximum endpoint capacity, scaling cooldowns, startup time, and burst size. Then confirm: A synthetic load surge meets error and latency SLOs without rejected provisioning due to quota or startup lag. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A real-time ML service is configured for very low baseline capacity but traffic can surge tenfold within seconds, exhausting available instance capacity. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
Incorrect Answers
B:Configure supported provisioned concurrency for the latency-critical interval or switch to provisioned real-time hosting if justified. This selection concerns sagemaker endpoint provisioned concurrency tradeoff rather than the required diagnostic-and-remedy pair for endpoint scale-to-zero cold capacity planning. Use evidence: Inspect service quotas, minimum and maximum endpoint capacity, scaling cooldowns, startup time, and burst size. and the matching correction: Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp. Signal: A real-time ML service is configured for very low baseline capacity but traffic can surge tenfold within seconds, exhausting available instance capacity. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
C:Inspect versioned request schema, unit-test coverage, container /invocations behavior, and pipeline gate logs. This selection concerns continuous integration unit and endpoint contract tests rather than the required diagnostic-and-remedy pair for endpoint scale-to-zero cold capacity planning. Use evidence: Inspect service quotas, minimum and maximum endpoint capacity, scaling cooldowns, startup time, and burst size. and the matching correction: Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp. Signal: A real-time ML service is configured for very low baseline capacity but traffic can surge tenfold within seconds, exhausting available instance capacity. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
E:Keep the blue environment available until green health gates pass and automate traffic rollback on failed alarms. This selection concerns blue-green endpoint rollback after health failure rather than the required diagnostic-and-remedy pair for endpoint scale-to-zero cold capacity planning. Use evidence: Inspect service quotas, minimum and maximum endpoint capacity, scaling cooldowns, startup time, and burst size. and the matching correction: Set adequate minimum capacity, scaling limits, alarms, and request backpressure for the expected traffic ramp. Signal: A real-time ML service is configured for very low baseline capacity but traffic can surge tenfold within seconds, exhausting available instance capacity. Operational setting: During an operational load and release rehearsal for SageMaker-hosted inference.
Question 780
While reproducing the alert in an isolated AWS ML integration account, the following condition is observed: A model is deployed to a large general-purpose instance based only on notebook habits, with no comparison of lower-cost inference-optimized choices. The proposed change must preserve logging and least privilege. Select TWO: the appropriate diagnostic check and the targeted implementation change.
- Use SageMaker Inference Recommender or equivalent controlled load tests to rightsize the serving instance family.
- Configure actionable alarms, capacity, and supported scaling or backpressure based on the burst window.
- Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations.
- Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence.
- Capture stable prediction identifiers and ingest verified labels with matching keys for model-quality analysis.
Explanation
Correct Answers
A:Use SageMaker Inference Recommender or equivalent controlled load tests to rightsize the serving instance family. This is the appropriate controlled remedy for inference recommender benchmarking instance family. Rightsizing depends on workload measurements rather than the training machine or instance size alone. Verify the cause with: Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations. Then confirm: A chosen instance meets throughput and latency targets at lower measured cost per thousand predictions. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A model is deployed to a large general-purpose instance based only on notebook habits, with no comparison of lower-cost inference-optimized choices. Operational setting: While reproducing the alert in an isolated AWS ML integration account.
C:Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations. This directly tests inference recommender benchmarking instance family in the reported AWS ML workflow. Rightsizing depends on workload measurements rather than the training machine or instance size alone. It distinguishes the problem before choosing a change. The related targeted response is: Use SageMaker Inference Recommender or equivalent controlled load tests to rightsize the serving instance family. This is one part of a select-two decision; the matching evidence and corrective action are both required. Reported signal: A model is deployed to a large general-purpose instance based only on notebook habits, with no comparison of lower-cost inference-optimized choices. Operational setting: While reproducing the alert in an isolated AWS ML integration account.
Incorrect Answers
B:Configure actionable alarms, capacity, and supported scaling or backpressure based on the burst window. This selection concerns cloudwatch 5xxerrors endpoint saturation rather than the required diagnostic-and-remedy pair for inference recommender benchmarking instance family. Use evidence: Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations. and the matching correction: Use SageMaker Inference Recommender or equivalent controlled load tests to rightsize the serving instance family. Signal: A model is deployed to a large general-purpose instance based only on notebook habits, with no comparison of lower-cost inference-optimized choices. Operational setting: While reproducing the alert in an isolated AWS ML integration account.
D:Inspect identity and destination bucket policies, resource ARNs, organization restrictions, and CloudTrail data-event evidence. This selection concerns cross-account s3 bucket exfiltration protection rather than the required diagnostic-and-remedy pair for inference recommender benchmarking instance family. Use evidence: Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations. and the matching correction: Use SageMaker Inference Recommender or equivalent controlled load tests to rightsize the serving instance family. Signal: A model is deployed to a large general-purpose instance based only on notebook habits, with no comparison of lower-cost inference-optimized choices. Operational setting: While reproducing the alert in an isolated AWS ML integration account.
E:Capture stable prediction identifiers and ingest verified labels with matching keys for model-quality analysis. This selection concerns model monitor ground truth association rather than the required diagnostic-and-remedy pair for inference recommender benchmarking instance family. Use evidence: Measure memory, throughput, p95 latency and cost across supported candidate endpoint configurations. and the matching correction: Use SageMaker Inference Recommender or equivalent controlled load tests to rightsize the serving instance family. Signal: A model is deployed to a large general-purpose instance based only on notebook habits, with no comparison of lower-cost inference-optimized choices. Operational setting: While reproducing the alert in an isolated AWS ML integration account.