Databricks Generative AI Engineer Associate Question 191
Select 3You are tasked with setting up a Databricks model serving endpoint to serve predictions for a sensitive financial application. To ensure secure access, you need to restrict access to the endpoint and enforce authentication. Which of the following actions should you take to control access to the model serving endpoint?
- A
Enable token-based authentication for accessing the endpoint.
- B
Configure cluster-level permissions to restrict user access to the serving cluster.
- C
Use IP access lists to allow only specific IP addresses to communicate with the endpoint.
- D
Disable SSL/TLS encryption for the endpoint to improve performance.
- E
Integrate the endpoint with an API gateway that supports additional security policies.
Show answer and explanation
Correct answers: A, C, E
Explanation
To control access to model serving endpoints on Databricks, it's important to enforce token-based authentication, restrict access using IP access lists, and optionally integrate with an API gateway for enhanced security policies. These steps collectively ensure that only authorized users and systems can access the endpoint while protecting the communication channel.
- A. Correct.
Enabling token-based authentication ensures that only authenticated users or systems with valid tokens can access the endpoint, providing secure access control.
- B. Incorrect.
While cluster-level permissions are important for securing the underlying infrastructure, they do not directly control access to the model serving endpoint.
- C. Correct.
IP access lists provide an additional layer of security by restricting communication to the endpoint from specific trusted IP addresses.
- D. Incorrect.
Disabling SSL/TLS encryption is a security risk and should never be done for sensitive applications as it leaves communications vulnerable to interception.
- E. Correct.
Integrating the endpoint with an API gateway allows for enforcing additional security policies like rate limiting, advanced authentication methods, and traffic monitoring.