A company must run Amazon SageMaker training and inference in an isolated environment without internet access to meet compliance. Which option satisfies this requirement?

Enabling network isolation for SageMaker training and inference is the correct solution because it configures SageMaker to run jobs within a private VPC without internet access, satisfying the compliance requirement for an isolated environment. SageMaker network isolation ensures that all traffic stays within your specified VPC. Running SageMaker jobs using SageMaker Experiments is incorrect because Experiments is a management tool for tracking and comparing jobs, not a network isolation feature. Encrypting SageMaker geospatial data at rest is a security best practice for data protection but does not address network isolation. Attaching appropriate IAM roles to SageMaker jobs is crucial for access control and permissions but does not provide network isolation.