Ace Alibaba Cloud ACP-Cloud1 Certification with Actual Questions Jul 29, 2024 Updated
2024 The Most Effective ACP-Cloud1 with 72 Questions Answers
NEW QUESTION # 39
Many websites have suffered DDoS attacks of different volumes. Therefore, accurate understanding of DDoS attacks is critical to website security protection. Which of the following statements about DDoS attacks is the MOST accurate?
- A. DDoS attacks primarily target databases.
- B. The purpose of a DDoS attack is to steal confidential information.
- C. A DDoS attacks crack the server's logon password by means of a massive number of attempts.
- D. The main purpose of a DDoS attack is to prevent the target server from providing normal services. Currently, the DDoS attack is one of the strongest and most indefensible website attacks.
Answer: D
NEW QUESTION # 40
RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning.
- A. True
- B. False
Answer: A
Explanation:
Explanation
RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning1. A whitelist is a list of IP addresses or CIDR blocks that are allowed to access an RDS instance. By default, the whitelist is empty, which means that no IP address can access the RDS instance. You can add IP addresses or CIDR blocks to the whitelist to allow access from specific sources. You can also modify or delete the whitelist as needed2. Whitelist access policies help improve the security of your RDS instance and protect your data from unauthorized access3.
NEW QUESTION # 41
A new media company uses a mobile app to provide news and information services. They utilize Auto Scaling to add/reduce ECS instances dynamically to address service traffic spikes.
Based on the estimation of their service and technical personnel the company thinks they require 10 ECS instances during idle hours and 10 to 20 ECS instances (dynamically adjusted) during some busy hours, which are normally from 07:30 to 09:00 and from 18:30 to 20:00 In the scaling group; they set the "Minimum number of instances" to 10 and "Maximum number of instances" to 20.
To simplify deployment tasks and save costs, which of the following scaling modes should they choose?
- A. Scheduled mode
- B. Fixed quantity mode
- C. Event-triggered mode
- D. Healthy mode
Answer: A
Explanation:
Explanation
According to the Alibaba Cloud Auto Scaling documentation, scheduled mode allows you to configure the scheduled tasks by adding or removing ECS instances for a fixed time. This mode is suitable for scenarios where the service traffic spikes are predictable and periodic. For example, a new media company can use scheduled mode to add or reduce ECS instances dynamically to address service traffic spikes during some busy hours, such as from 07:30 to 09:00 and from 18:30 to 20:00. This mode can help simplify deployment tasks and save costs by avoiding unnecessary scaling activities. References: How Auto Scaling works - Auto Scaling - Alibaba Cloud Documentation Center.
NEW QUESTION # 42
You are using Auto Scaling with one scaling group already created, then you want to execute a task at a specific time such as removing 1 ECS instance every night at 00:00. To achieve this, which of the following operations should be performed'? (Number of correct answers; 2)
- A. Create an event-triggered task.
- B. Create a new scaling group.
- C. Create a scheduled task.
- D. Create a scaling rule
Answer: B,D
NEW QUESTION # 43
When you create an Alibaba Cloud VPC. a VRouter and a route table will be created automatically. Which of the following statements is NOT correct about the route table?
- A. This route table cannot be deleted
- B. The routing entries of the route table can not be modified manually.
- C. Each VRouter may have multiple route tables.
- D. When a VPC is deleted, the corresponding route table is also deleted.
Answer: B
Explanation:
Explanation
A route table is a set of rules that determine how network traffic is routed within a VPC or between different network instances1. A VRouter is a hub that connects all VSwitches in the same VPC and enables communication between them2. When you create a VPC, a VRouter and a default route table are automatically created for the VPC1. The default route table contains system routes that are automatically generated by the system based on the network topology1. The system routes cannot be modified or deleted1.
However, you can also create custom route tables for your VPC and add custom routes to them1. Custom routes are manually configured by users to route traffic to specific destinations, such as other VPCs, VBRs, VPN Gateways, or NAT Gateways1. Custom routes can be modified or deleted as needed1. You can also associate VSwitches with different route tables to implement fine-grained routing control1.
Therefore, the statement that the routing entries of the route table can not be modified manually is not correct, as it only applies to system routes, not custom routes. The other statements are correct, as each VRouter may have multiple route tables, one default and several custom1; when a VPC is deleted, the corresponding route table is also deleted3; and the default route table cannot be deleted1. References: Route table overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, VRouter overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, Delete a VPC - Virtual Private Cloud - Alibaba Cloud Documentation Center
NEW QUESTION # 44
Before data communication is setup, the security groups match the security group rules one by one to query whether to allow access requests Assume that the user has created two security group rules 1 and 2 The protocol type, port range, authorization type, and authorization object of the two security group rules are the same. The difference is that Rule 1 is a denial policy, rule 2 is an allowed policy, so the following statement is correct_______ (Number of correct answers 2)
- A. If rule 1 and rule 2 have different priorities, the rule with a large priority number takes effect.
- B. If rule 1 and rule 2 have different priorities, the rule with a small priority number takes effect
- C. If rule 1 and rule 2 have the same priority, the rule of the allowed policy takes effect first, and the rule that of the denial policy does not take effect.
- D. If rule 1 and rule 2 have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect
Answer: B,D
NEW QUESTION # 45
A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that
1. Must support secured remote O&M because the administrator often takes business trips.
2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)
- A. Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.
- B. Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.
- C. Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.
- D. Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace).
The administrator uses VPN encrypted communication during O&M.
Answer: B,C,D
Explanation:
Explanation
To meet the company's security requirements, the following solutions should be used together:
A: Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace).
The administrator uses VPN encrypted communication during O&M. This solution can support secure remote O&M, because VPN (Virtual Private Network) is a technology that creates a secure and encrypted connection over the Internet between the bastion host and the administrator's device. VPN can protect the data transmitted between the bastion host and the administrator from being intercepted or tampered by malicious third parties1. Alibaba Cloud provides VPN Gateway service that allows users to create VPN connections between VPCs and on-premises data centers, or between VPCs in different regions2. Users can also use VPN images from Alibaba Cloud Marketplace, such as OpenVPN, to create VPN servers on ECS instances3.
B: Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems. This solution can also support secure remote O&M, because a bastion host is a special-purpose ECS instance that acts as a proxy or a gateway for accessing other ECS instances in the VPC. A bastion host can enhance the security of the ECS instances by limiting the exposure of the ECS instances to the public network, and by implementing security policies and monitoring tools on the bastion host4. Alibaba Cloud provides Bastionhost service that allows users to centrally manage the access to cloud servers from external networks and provide secure connections to VPC resources5.
C: Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups. This solution can isolate the networks between subsystems, because a security group is a virtual firewall that controls the inbound and outbound traffic of the ECS instances in the group. Users can configure security group rules to allow or deny access based on the network protocol, port, and source IP address. By deploying ECS instances running different subsystems to independent security groups, users can prevent unauthorized access or communication between the subsystems6.
The other solution is not suitable for the company's scenario, for the following reason:
D: Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups. This solution cannot isolate the networks between subsystems, because ECS instances in the same security group can communicate with each other by default, regardless of whether they have intranet or internet IP addresses. Moreover, this solution may also prevent the ECS instances from accessing the internet or providing external services, which may affect the business operation of the company6.
References: What is a VPN? - Virtual Private Network - Cisco, VPN Gateway - Alibaba Cloud, OpenVPN - Alibaba Cloud Marketplace, Bastion Host - Alibaba Cloud Document Center, Bastionhost - Alibaba Cloud, Security groups - Elastic Compute Service - Alibaba Cloud
NEW QUESTION # 46
Alibaba Cloud Elastic Compute Service (ECS) instances in different Security Groups will definitely have no way to communicate with each other.
- A. False
- B. True
Answer: A
Explanation:
Explanation
Alibaba Cloud Elastic Compute Service (ECS) instances in different security groups are isolated from each other by default, but they can communicate with each other if the security group rules allow it. A security group is a virtual firewall that controls the inbound and outbound traffic of ECS instances. You can configure security group rules to specify which IP addresses, protocols, and ports can access the ECS instances in a security group. You can also authorize other security groups to access the ECS instances in a security group, which enables cross-security group communication. References: Manage ECS instances in security groups, Security FAQ, ECS Security Groups - Alibaba Fundamentals
NEW QUESTION # 47
Which of the following scenarios can be done using Alibaba Cloud Express Connection? (Number of correct answers: 2)
- A. Intranet communication between two VPCs in different accounts and different CIDR Blocks
- B. Intranet communication between VPCs and Smart Access Gateway in customers different branch offices
- C. Intranet communication between two VPCs under the same account in the same region
- D. Intranet communication between a VPC and servers in an external IDC
Answer: B,D
Explanation:
Explanation
Alibaba Cloud Express Connect is a service that enables high-bandwidth, reliable, secure, and private connections between different networks, such as VPC networks across regions, Alibaba Cloud accounts, and on-premise data centers1. It supports different connection methods, such as physical connections, virtual border routers, and Express Cloud Connect1.
Scenario A: Intranet communication between VPCs and Smart Access Gateway in customers different branch offices. This scenario can be achieved by using Express Cloud Connect, which is based on the hardware capacities of Smart Access Gateway and provides SD-WAN capabilities1. Express Cloud Connect allows you to connect your branch offices to Alibaba Cloud through a dedicated partner backbone network, and access VPC networks in all regions1.
Scenario B: Intranet communication between a VPC and servers in an external IDC. This scenario can be achieved by using physical connections, which are dedicated network connections between on-premise data centers and VPC networks1. You can lease a line from your ISP or work with an Alibaba Cloud partner to establish a physical connection to Alibaba Cloud1. This way, you can access VPC networks in all regions with high bandwidth and low latency1.
Scenario C: Intranet communication between two VPCs in different accounts and different CIDR Blocks. This scenario can be achieved by using peering connections, which are logical connections that enable communication between VPC networks2. Peering connections support cross-region and cross-account scenarios, and allow you to connect VPC networks with different CIDR blocks2. However, peering connections are not part of Alibaba Cloud Express Connect, but a separate service called Cloud Enterprise Network2.
Scenario D: Intranet communication between two VPCs under the same account in the same region. This scenario can also be achieved by using peering connections, which are logical connections that enable communication between VPC networks2. Peering connections support intra-region and same-account scenarios, and allow you to connect VPC networks with different CIDR blocks2. However, peering connections are not part of Alibaba Cloud Express Connect, but a separate service called Cloud Enterprise Network2. References: 1: Express Connect - Alibaba Cloud 2: Introduction to Cloud Enterprise Network - Alibaba Cloud Document Center
NEW QUESTION # 48
Alibaba Cloud ECS provides multiple instance types to meet the needs of different business scenarios. A medium-sized enterprise user wants to use two ECS instances, one to deploy a single Tomcat service and the other one to deploy Memcache. Which of the following configurations is most recommended?
- A. Tomcat: 4 cores, 4G, Memcache: 2 cores, 8G
- B. Tomcat: 4 cores. 8G, Memcache: 2 cores: 16G
- C. Tomcat: 4 cores 8G. Memcache: 2 cores 8G
- D. Tomcat: 4 cores: 4G, Memcache: 2 cores: 16G
Answer: A
NEW QUESTION # 49
You are using Auto Scaling with one scaling group already created, then you want to execute a task at a specific time such as removing 1 ECS instance every night at 00:00. To achieve this, which of the following operations should be performed'? (Number of correct answers; 2)
- A. Create an event-triggered task.
- B. Create a new scaling group.
- C. Create a scheduled task.
- D. Create a scaling rule
Answer: C,D
Explanation:
Explanation
To execute a task at a specific time such as removing 1 ECS instance every night at 00:00, you need to perform two operations: create a scaling rule and create a scheduled task. A scaling rule is a set of instructions that defines how Auto Scaling scales computing resources in response to changes in business load. A scheduled task is a type of scaling task that can execute a specified scaling rule at a specified time. By creating a scaling rule that removes 1 ECS instance from the scaling group, and creating a scheduled task that executes this scaling rule every night at 00:00, you can achieve the desired result. You do not need to create a new scaling group, because you already have one scaling group created. You also do not need to create an event-triggered task, because this type of scaling task is triggered by events such as Cloud Monitor alarms or API calls, not by a specific time. References: 1, 2, and 3.
NEW QUESTION # 50
When creating an ECS instance in your Alibaba Cloud VPC, you must specify a VSwitch for that instance at the same time. Otherwise, you will not be able to create this ECS instance.
- A. True
- B. False
Answer: A
Explanation:
Explanation
When creating an ECS instance in your Alibaba Cloud VPC, you must specify a VSwitch for that instance at the same time. Otherwise, you will not be able to create this ECS instance. This is true according to the Alibaba Cloud documentation on ECS1. A VSwitch is a basic network device of a VPC and is used to connect different cloud product instances deployed in a VPC2. A VSwitch defines a network segment within a VPC and allows you to specify the IP address range, network mask, and gateway for the network segment2. When you create an ECS instance, you must select a VSwitch that belongs to the same zone as the ECS instance3. If you do not specify a VSwitch, the ECS instance will not be able to communicate with other cloud product instances in the VPC or access the Internet. References: 1: Create an instance by using the provided wizard - Elastic Compute Service - Alibaba Cloud Documentation Center 2: What is a VSwitch? - Virtual Private Cloud - Alibaba Cloud Documentation Center 3: Create an instance by using the advanced wizard - Elastic Compute Service - Alibaba Cloud Documentation Center : [VPC FAQ - Virtual Private Cloud - Alibaba Cloud Documentation Center]
NEW QUESTION # 51
As a concept stem from cloud computing, cloud storage service provides on-demand storage and data services to users through a unified interface Which of the following characteristics about cloud storage are correct? (Number of correct answers: 4)
- A. Service on demand Cloud storage has a huge resources pool, users can apply for and use the resources on demand.
- B. Transparent service: Provides the service through a single SDK
- C. High scalability Storage capacity can be dynamically scaled to meet the needs.
- D. Ultra-large scale: Data storage can reach TB or even PB level
- E. High reliability and availability: Provides very high reliability and availability through technologies like 3 redundant copies, automatic failure recovery, etc.
- F. Management and maintenance: To prevent emergent service termination, users need to know the underlying detail like how the data is archived in the resource pool.
Answer: A,B,C,E
NEW QUESTION # 52
Object Storage Service (OSS) supports access logging. A bucket owner can activate access logging for their buckets in the OSS management console. When access logging is activated for bucket A, OSS automatically accesses the request logs for this bucket (in hours) and generates and writes an object to the user-specified bucket B according to certain naming rules. Which of the following statements is true for OSS logging?
- A. Buckets A and B must be the same bucket.
- B. Buckets A and B can be separate buckets (or a single bucket) but they must belong to the same user
- C. Buckets A and B must be different buckets.
- D. Buckets A and B can belong to different users.
Answer: B
NEW QUESTION # 53
RDS accounts can be used to connect with the databases created on a given RDS instance. Each account can be bound with multiple databases. Yet, the read/write permissions of each database can only be assigned to one RDS account
- A. False
- B. True
Answer: A
Explanation:
Explanation
RDS accounts can be used to connect with the databases created on a given RDS instance. Each account can be bound with multiple databases. However, the read/write permissions of each database can be assigned to multiple RDS accounts, not just one. For example, you can create an account with read-only permission for all databases, and another account with read-write permission for a specific database. This way, you can manage the access control of your databases more flexibly and securely. References: Introduction to ApsaraDB RDS - Alibaba Cloud Document Center - User Management - Account Permissions
NEW QUESTION # 54
A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that
1. Must support secured remote O&M because the administrator often takes business trips.
2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)
- A. Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M.
- B. Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.
- C. Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.
- D. Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.
Answer: A,B,D
NEW QUESTION # 55
Different Alibaba Cloud VPCs are completely isolated from each other.
By default, the VPCs cannot communicate with each other over Intranet, but you can establish VPN connections via the Internet to achieve interconnection between VPCs.
- A. True
- B. False
Answer: A
NEW QUESTION # 56
Many cloud computing service providers support users to activate/create a cloud service through Open API. Which of the following protocols is most not likely to be supported by these Open API?
- A. Web Service
- B. HTTP
- C. PPPoE
- D. Restful
Answer: C
NEW QUESTION # 57
Alibaba Cloud Server Load Balancer (SLB) provides services for distributing traffic among multiple ECS instances SLB can expand the application system's service capacity through traffic distribution, and improve the system's availability by eliminating SPoFs (Single Points of Failure). Which of the following statements are correct? (Number of correct answers; 2)
- A. SLB provides a function to automatically synchronize data among backend ECS instances using rsync remote synchronization.
- B. Before using SLB to provide external services, make sure that you have installed and correctly configured the SLB agent on all of the backend ECS instances.
- C. One of SLB's features is the Health Check. If some of the backend ECS instances are down, whereas other backend ECS instances can still provide services, then the system can continue to work normally.
- D. When recreating an SLB instance that has an Internet IP address, a new Internet IP address will be assigned to the SLB instance.
Answer: C,D
Explanation:
Explanation
According to the Alibaba Cloud SLB documentation1, SLB provides a health check feature that monitors the availability and performance of the backend servers. If a backend server fails the health check, SLB stops routing requests to it and redirects the traffic to other healthy servers. This way, SLB can improve the system's availability by eliminating single points of failure (SPOFs). Therefore, option A is a correct statement about SLB.
According to the same documentation1, SLB instances are assigned with public IP addresses or private IP addresses based on the network type. If you delete an SLB instance and create a new one, a new IP address will be allocated to the new instance. You cannot specify or reserve an IP address for an SLB instance.
Therefore, option B is also a correct statement about SLB.
Option C is incorrect, because SLB does not require you to install or configure any SLB agent on the backend servers. You only need to add the backend servers to the SLB instance and configure the listener and the server group. SLB will automatically distribute the traffic to the backend servers based on the load balancing algorithm and the health check status2.
Option D is also incorrect, because SLB does not provide a function to automatically synchronize data among backend servers. SLB only handles the network traffic distribution and does not interfere with the data on the backend servers. You need to use other methods or tools to synchronize data among backend servers, such as rsync, lsyncd, or Alibaba Cloud Data Transmission Service (DTS)3.
References: Server Load Balancer:SLB overview, Add backend servers, and Data Transmission Service.
NEW QUESTION # 58
Company A constructed a sales management platform using three Elastic Compute Service (ECS) instances.
One of the instances runs MySQL, and is used as the database server. The other two instances are used as Web servers After some time, the number of employees in Company A dramatically increases, leading to higher sales volumes At the same time, the platform response speed is gradually decreasing too.
According to the report from CloudMonitor, the average CPU utilization rate of the two Web servers exceeds
70%, and database load
reaches 75% Company A can select Alibaba Cloud_________ services.to cope with the issue and optimize the performance. (Number of correct answers: 2)
- A. Incorporate Server Load Balancer (SLB) and add additional ECS instances to relieve the load on existing ECS instances
- B. Import database data into Object Storage Service (OSS) to share the storage pressure on the platform
- C. Replace the self-built MySQL database with ApsaraDB for RDS to obtain better database performance, and utilize RDS read-only instances to handle read-only requests
- D. Use Content Delivery Network (CDN) to enhance content loading speed
Answer: A,C
Explanation:
Explanation
Option B is correct because using Server Load Balancer (SLB) and adding additional ECS instances can help to distribute the traffic among multiple servers and improve the availability and scalability of the platform. SLB can also provide health checks and fault tolerance for the ECS instances1 Option D is correct because replacing the self-built MySQL database with ApsaraDB for RDS can provide better database performance, security, and reliability. ApsaraDB for RDS is a fully managed cloud database service that supports MySQL, SQL Server, PostgreSQL, and other engines. It can automatically handle tasks such as backup, recovery, monitoring, and patching. Using RDS read-only instances can also handle read-only requests and reduce the load on the primary database2 Option A is incorrect because importing database data into Object Storage Service (OSS) will not share the storage pressure on the platform. OSS is a cloud storage service that provides high durability, availability, and scalability for storing unstructured data such as images, videos, and documents. It is not suitable for storing structured data such as database tables. Moreover, importing data into OSS will incur additional costs and latency3 Option C is incorrect because using Content Delivery Network (CDN) will not enhance the content loading speed of the platform. CDN is a distributed network that delivers content to users based on their geographic locations, the origin of the content, and the content delivery server. It is mainly used to accelerate the delivery of static content such as images, videos, and scripts. It is not effective for dynamic content such as database queries and transactions4 References:
1: Server Load Balancer - Alibaba Cloud
2: ApsaraDB for RDS - Alibaba Cloud
3: Object Storage Service - Alibaba Cloud
4: Content Delivery Network - Alibaba Cloud
NEW QUESTION # 59
You would like to deploy your applications on Alibaba Cloud to meet requirements including cost reduction, improving service availability, fast deployment- and redundant backup Alibaba Cloud_________products can help meet these requirements (Number of correct answers 3)
- A. Elastic Compute Service (ECS) image achieve efficient and convenient deployment.
- B. Utilizing Content Delivery Network (CDN) can meet the demands for redundant backup.
- C. Elastic Compute Service (ECS) snapshot satisfies the needs of rapid recovery of applications and data.
- D. Utilizing Server Load Balancer (SLB) and ECS instances can improve data reliability.
- E. Reasonable selection of Regions/Zones meets the location needs of application deployment as well as the demands for redundantly backup critical business applications and data.
Answer: A,D,E
Explanation:
Explanation
A: Elastic Compute Service (ECS) image achieve efficient and convenient deployment. This is correct because ECS images are pre-configured operating system environments that can be used to create and launch ECS instances quickly and easily. ECS images can reduce the cost and time of deploying applications on Alibaba Cloud1.
B: Utilizing Content Delivery Network (CDN) can meet the demands for redundant backup. This is incorrect because CDN is not a backup service, but a service that accelerates the delivery of content to end users by caching it at edge nodes. CDN can improve the performance and availability of applications, but it does not provide data redundancy or backup2.
C: Utilizing Server Load Balancer (SLB) and ECS instances can improve data reliability. This is correct because SLB is a service that distributes traffic among multiple ECS instances based on predefined rules. SLB can improve the availability and reliability of applications by eliminating single points of failure and ensuring that requests are routed to healthy instances3.
D: Elastic Compute Service (ECS) snapshot satisfies the needs of rapid recovery of applications and data. This is incorrect because ECS snapshot is a feature that allows users to create point-in-time backups of ECS disks. ECS snapshots can be used to restore data or create new disks, but they do not satisfy the needs of rapid recovery of applications and data. Snapshots are stored in Object Storage Service (OSS), which is a low-cost and durable storage service, but it has higher latency and lower performance than disks4.
E: Reasonable selection of Regions/Zones meets the location needs of application deployment as well as the demands for redundantly backup critical business applications and data. This is correct because regions and zones are the physical locations of Alibaba Cloud data centers. Regions are geographically isolated from each other, and zones are physically independent within the same region. Users can choose the regions and zones that best suit their application deployment needs, such as proximity to customers, compliance with local regulations, and availability of services. Users can also use multiple regions and zones to achieve redundancy and backup for their critical business applications and data.
References: 1: ECS Images 2: CDN Overview 3: SLB Overview 4: ECS Snapshots : Regions and Zones
NEW QUESTION # 60
A company launched its online service just a year ago. It uses five ECS instances and does not have a full-time system administrator Over the last six months, the company's system has encountered various security problems Several high-risk vulnerabilities were exploited by hackers, leading to leakage of the company's confidential data. Which of the following Alibaba Cloud products can be used to quickly resolve this problem?
- A. Managed Security Service
- B. Anti-DDoS Pro Service
- C. Security Center
- D. Cloud Firewall
Answer: C
Explanation:
Explanation
Security Center is a centralized security management system that dynamically identifies and analyzes security threats, and generates alerts when threats are detected. Security Center provides multiple features to ensure the security of cloud resources and servers in data centers1. Security Center can help the company to quickly resolve its security problems by providing the following benefits:
Unified security management: Security Center automatically collects various log data from the company's services on the cloud, and implements control over found security threats. Security Center can also manage assets, attacks, vulnerabilities, and threats in the Security Center console2.
Proactive defense: Security Center supports the proactive detection and termination of mainstream ransomware, mining programs, backdoor programs, worms, malicious programs, DDoS trojans, and trojan programs. Security Center also prevents websites from being maliciously implanted with the acts that involve terrorism, politics, dark chains, trojans, and backdoors. This ensures the normal operation of web page information2.
Automated security operations: Security Center automatically traces the sources and causes of attacks.
This helps the company understand the ins and outs of intrusion threats and make quick responses. Security Center also supports custom alerts and third-party data migration to the cloud in a secure manner2. References: Security Center - Alibaba Cloud, Cloud Security- Alibaba Cloud, Introduction to Security Center - Alibaba Cloud Document Center
NEW QUESTION # 61
You are designing a solution for a startup company, the proposed solution is like this You suggest they use ECS instances to process requests from mobile App clients, and use SLB to distribute data traffic and ensure the load across each backend ECS instance is balanced.
Moreover to deal with volatile fluctuations in business volume (page views are much higher on the weekends), you also suggest they use Auto Scaling to dynamically increase or reduce computing resources.
The company is satisfied with the solution you proposed. However, they have one concern that when removing an idle instance from the scaling group: if Auto Scaling shuts the instance down directly, the service running on that instance will be abruptly terminated, resulting in poor user experience.
In order to eliminate your customer's concern, which of the following solutions should you recommend them?
- A. Use the Lifecycle Hook function embedded m Auto Scaling Define a suitable timeout and a web hook to do the necessary work before the instance is removed.
- B. Find the ECS instance that is going to be removed from the backend server pool of the SLB instance, and manually remove this instance from the backend server pool Applications running on this ECS instance will normally return results, but this instance will not be assigned with new requests.
- C. Find the ECS instance that is going to be removed from the backend server pool of the SLB instancer and automatically set the weight of this ECS instance to 0. This instance will not be assigned with new requests, and will be automatically removed from the backend server pool after existing tasks are completed.
- D. First, insert a script into the image for creating the ECS instance Second, make the script run automatically when the operating system in this ECS instances is about to shut down. This script contains the processing logic that can ensure the instance finish all the remaining tasks before shutting down.
Answer: A
NEW QUESTION # 62
......
Try Free and Start Using Realistic Verified ACP-Cloud1 Dumps Instantly.: https://www.torrentexam.com/ACP-Cloud1-exam-latest-torrent.html
ACP-Cloud1 Actual Questions - Instant Download 72 Questions: https://drive.google.com/open?id=1olci0Tg6GkF4chxTTi9fjAKHxxO4m0LX
