Databricks Generative AI Engineer Associate Question 192
Select 3You are deploying a model serving endpoint in Databricks to provide predictions for an e-commerce application. The endpoint must be secured so that only authorized users or applications can access it. Which of the following steps should you take to control access to the model serving endpoint?
- A
Configure access control lists (ACLs) for the model serving endpoint.
- B
Enable token-based authentication for the endpoint and distribute personal access tokens (PATs) to authorized users.
- C
Ensure the cluster running the model has public IP access enabled for unrestricted usage.
- D
Integrate the model serving endpoint with a cloud provider's identity and access management (IAM) policies.
- E
Disable API endpoint access to restrict usage to the Databricks web interface only.
Show answer and explanation
Correct answers: A, B, D
Explanation
To control access to model serving endpoints, you need to implement robust security practices such as access control lists, token-based authentication, and integration with cloud IAM policies. These measures ensure that only authorized users or applications can access the endpoint while maintaining the usability of the system. Allowing public IP access or disabling API endpoints entirely are not recommended practices for securing production-grade endpoints.
- A. Correct.
Correct: Configuring access control lists (ACLs) allows you to define which users or user groups have access to the endpoint, ensuring only authorized access.
- B. Correct.
Correct: Enabling token-based authentication ensures that only users with valid tokens can interact with the endpoint, adding an additional layer of security.
- C. Incorrect.
Incorrect: Allowing public IP access increases the risk of unauthorized access and does not align with best practices for securing model serving endpoints.
- D. Correct.
Correct: Integrating with a cloud provider's IAM policies allows you to leverage existing authentication and authorization mechanisms for secure access control.
- E. Incorrect.
Incorrect: Disabling API endpoint access would prevent the application from using the endpoint programmatically, which is not a practical solution for most production use cases.