0% found this document useful (0 votes)

82 views11 pages

Alibaba Cloud Computing Dump

The document provides information about the ACP-Cloud1 exam, including details on security group rules, log retention solutions, and various Alibaba Cloud products like OSS and Security Center. It outlines questions and answers related to cloud computing concepts, focusing on best practices for managing cloud resources and ensuring security. The content serves as a study guide for individuals preparing for the Alibaba Cloud certification exam.

Uploaded by

Sean

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

82 views11 pages

Alibaba Cloud Computing Dump

Uploaded by

Sean

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 11

PDFDumps

http://www.pdfdumps.com
PDFDumps can solve all your IT exam problems and broaden your knowledge
ACP-Cloud1 PDF dumps & ACP-Cloud1 dumps training make for your success in the coming Alibaba Cloud exam
IT Certification Guaranteed, The Easy Way!

Exam : ACP-Cloud1

Title : ACP Cloud Computing

Professional

Vendor : Alibaba Cloud

Version : DEMO

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 1ACP-Cloud1 real dumps

https://www.pdfdumps.com/ACP-Cloud1-valid-exam.html
ACP-Cloud1 PDF dumps & ACP-Cloud1 dumps training make for your success in the coming Alibaba Cloud exam
IT Certification Guaranteed, The Easy Way!

NO.1 Before data communication is setup, the security groups match the security group rules one by
one to query whether to allow access requests Assume that the user has created two security group
rules 1 and 2 The protocol type, port range, authorization type, and authorization object of the two
security group rules are the same. The difference is that Rule 1 is a denial policy, rule 2 is an allowed
policy, so the following statement is correct_______ (Number of correct answers 2)
A. If rule 1 and rule 2 have the same priority, the rule of the denial policy takes effect first, and the
rule of the allowed policy does not take effect
B. If rule 1 and rule 2 have the same priority, the rule of the allowed policy takes effect first, and the
rule that of the denial policy does not take effect.
C. If rule 1 and rule 2 have different priorities, the rule with a small priority number takes effect
D. If rule 1 and rule 2 have different priorities, the rule with a large priority number takes effect.
Answer: A C
Explanation:
Before data communication is set up, the security groups match the security group rules one by one
to query whether to allow access requests. If the protocol type, port range, authorization type, and
authorization object of two security group rules are the same, the following rules apply:
* If the two rules have the same priority, the rule of the denial policy takes effect first, and the rule of
the allowed policy does not take effect. This is because the security group rules follow the principle of
minimum permission, which means that the most restrictive rule is applied when there is a conflict.
* If the two rules have different priorities, the rule with a smaller priority number takes effect. This is
because the security group rules follow the principle of priority, which means that the rule with a
higher priority (lower number) is applied when there is a conflict. References: ECS Security Groups -
Alibaba Fundamentals - Cloud Academy, Security group rules - Elastic Compute Service - Alibaba Clo
ud Documentation Center

NO.2 The daily PV volume of a community website is as high as 20 million. The applications of the
website are deployed on ECS instances while logs are stored on the data disks of a single ECS
instance.
Now, the website wants to extend the log retention period to 24 months and ensure that logs can be
quickly downloaded when needed. The current data disks they have can only help retain three
months of logs In this case, ________ is the ideal solution for solving the log retention issue.
A. CDN
B. Container Service
C. OSS
D. ApsaraDB for RDS
Answer: C
Explanation:
OSS (Object Storage Service) is a secure, cost-effective, and highly reliable cloud storage service that
allows you to store, back up, and archive any amount of data in the cloud1. OSS is ideal for storing
logs, as it provides 99.9999999999% (12 nines) durability and 99.995% availability or service
continuity1. OSS also supports lifecycle management, which allows you to automatically delete or
transition objects to lower-cost storage classes based on your predefined rules2. OSS offers four tiers
of storage: Standard, Infrequent Access, Archive, and Cold Archive. Each tier is cost-optimized for
specific storage patterns1. The Archive and Cold Archive tiers are suitable for storing infrequently
accessed data, such as logs, for a long time. The Archive tier offers data retrieval time within one

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 2ACP-Cloud1 real dumps

minute, while the Cold Archive tier offers expedited data retrieval time within an hour1. Therefore,
OSS can help the website extend the log retention period to 24 months and ensure that logs can be
quickly downloaded when needed.
CDN (Content Delivery Network) is a distributed network that delivers content to users based on their
geographic locations, the origin sites, and the content delivery nodes3. CDN is mainly used for
content distribution, such as static web pages, images, videos, and downloads3. CDN is not suitable
for storing logs, as it does not provide data durability or lifecycle management.
Container Service is a high-performance and scalable container application management service that
enables you to use Docker and Kubernetes to manage the lifecycle of containerized applications4.
Container Service is mainly used for deploying and orchestrating microservices, serverless
applications, and big data applications4. Container Service is not suitable for storing logs, as it does
not provide data durability or lifecycle management.
ApsaraDB for RDS (Relational Database Service) is a stable and reliable online database service that
supports MySQL, SQL Server, PostgreSQL, MariaDB, and PPAS5. ApsaraDB for RDS is mainly used for
storing and processing structured data, such as user information, transaction records, and product
catalogs5. ApsaraDB for RDS is not suitable for storing logs, as it is more expensive and less scalable
than OSS. References: Object Storage Service (OSS) - Alibaba Cloud, Lifecycle management - Objec
t Storage Service - Alibaba Cloud Documentation Center, Content Delivery Network (CDN) - Alibab
a Cloud, Container Service - Alibaba Cloud, ApsaraDB for RDS - Alibaba Cloud

NO.3 An entrepreneur team builds a network disk application based on Alibaba Cloud Products. This
application allows users to upload and download files online. Currently, all the files are stored on the
data disks of ECS instances. As the service volume increases, the number of ECS instances and overall
O&M costs soar. To reduce O&M costs, using the ______________ product in conjunction with ECS
instances provides an ideal solution.
A. SLB
B. OSS
C. CDN
D. ApsaraDB for RDS
Answer: B
Explanation:
Alibaba Cloud OSS (Object Storage Service) is designed for storing large volumes of unstructured
data, such as files, images, and videos, making it an optimal solution for network disk applications. By
migrating storage from ECS data disks to OSS, the team can offload storage tasks, reduce the number
of ECS instances required, and significantly lower O&M costs. OSS also provides high scalability,
reliability, and cost- effectiveness for such use cases.

NO.4 The maximum number of connections for an RDS instance depends on ____________.
A. Memory size
B. CPU utilization rate
C. Disk capacity
D. Network traffic
Answer: A
Explanation:
The maximum number of connections to an RDS instance primarily depends on the memory size of

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 3ACP-Cloud1 real dumps

the instance. Higher memory capacity allows for more simultaneous connections, as memory is a key
resource in managing and maintaining connections. Alibaba Cloud RDS scales the connection limit
based on the instance's memory allocation to ensure stable database performance.

NO.5 A company launched its online service just a year ago. It uses five ECS instances and does not
have a full- time system administrator Over the last six months, the company's system has
encountered various security problems Several high-risk vulnerabilities were exploited by hackers,
leading to leakage of the company's confidential data. Which of the following Alibaba Cloud products
can be used to quickly resolve this problem?
A. Managed Security Service
B. Cloud Firewall
C. Anti-DDoS Pro Service
D. Security Center
Answer: D
Explanation:
Security Center is a centralized security management system that dynamically identifies and analyzes
security threats, and generates alerts when threats are detected. Security Center provides multiple
features to ensure the security of cloud resources and servers in data centers1. Security Center can
help the company to quickly resolve its security problems by providing the following benefits:
* Unified security management: Security Center automatically collects various log data from the
company's services on the cloud, and implements control over found security threats. Security Center
can also manage assets, attacks, vulnerabilities, and threats in the Security Center console2.
* Proactive defense: Security Center supports the proactive detection and termination of mainstream
ransomware, mining programs, backdoor programs, worms, malicious programs, DDoS trojans, and
trojan programs. Security Center also prevents websites from being maliciously implanted with the
acts that involve terrorism, politics, dark chains, trojans, and backdoors. This ensures the normal
operation of web page information2.
* Automated security operations: Security Center automatically traces the sources and causes of
attacks.
This helps the company understand the ins and outs of intrusion threats and make quick responses.
Security Center also supports custom alerts and third-party data migration to the cloud in a secure
manner2. References: Security Center - Alibaba Cloud, Cloud Security- Alibaba Cloud, Introduction t
o Security Center - Alibaba Cloud Document Center

NO.6 An enterprise hosts their servers (include both Linux and Windows servers) in a traditional IDC
Every night hackers with IP addresses from many countries try to crack the password of their servers,
making the administrator terribly worried about this However because of work requirements the
remote management port of these servers must be opened to public network.
The administrator heard that Alibaba Cloud has solutions that can help customers improve the
security of their systems Therefore, he/she wants to migrate the system to Alibaba Cloud. Which of
the following functions should the administrator activate in Alibaba Cloud to reduce the possibility of
brute force password cracking?
A. Cloud Firewall
B. Anti-DDoS Origin Basic Edition
C. CloudMonitor

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 4ACP-Cloud1 real dumps

D. Security Center
Answer: A
Explanation:
Cloud Firewall is a service that provides centralized protection for your cloud assets and prevents
unauthorized access to your servers. Cloud Firewall can monitor and control the inbound and
outbound traffic of your servers, and block malicious requests and attacks. Cloud Firewall can also
detect and prevent brute force password cracking attempts by using intelligent algorithms and threat
intelligence. Therefore, option A is the correct answer. References: What is Cloud Firewall?, Protect
servers from brute force attacks

NO.7 If you want to build a secure and isolated network environment on Alibaba Cloud; meanwhile,
design your network topology and specify Intranet IP addresses or CIDR Blocks in this network
environment as needed, you can choose
A. Leased line
B. Virtual Private Cloud (VPC)
C. Auto Scaling
D. Express Connect
Answer: B
Explanation:
According to the Alibaba Cloud VPC documentation1, a virtual private cloud (VPC) is a virtual network
dedicated to your Alibaba Cloud account. You have full control over your VPC, such as specifying the
CIDR block, configuring route tables and gateways, and creating subnets. A VPC is an isolated
network environment that provides security and flexibility for your cloud computing resources. You
can use a VPC to build a secure and isolated network environment on Alibaba Cloud, design your
network topology, and specify intranet IP addresses or CIDR blocks in this network environment as
needed. Therefore, option B is the correct choice for your scenario. References: What is a VPC? and
Alibaba Cloud Virtual Private Cloud.

NO.8 Alibaba Cloud SLB can distribute user requests to backend ECS instances. These ECS instances
must have the same specification (CPU, Memory)
A. True
B. False
Answer: B
Explanation:
Alibaba Cloud SLB can distribute user requests to backend ECS instances, but these ECS instances do
not have to have the same specification (CPU, Memory). SLB virtualizes the added group of ECS
instances in the same region into an application pool, and you can manage backend servers through
either the default server group, a primary server group, or VServer groups. You can add ECS instances
of different specifications to the same server group or VServer group according to your needs. SLB
supports weighted round-robin (WRR) and weighted least connections (WLC) algorithms to balance
the load among backend servers with different weights. References:
* SLB overview - Alibaba Cloud
* Backend server overview - Alibaba Cloud
* What is Server Load Balancer and How It Works - Alibaba Cloud
* Server Load Balancer - Alibaba Cloud

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 5ACP-Cloud1 real dumps

* Alibaba Server Load Balancer (SLB) Course - Cloud Academy

NO.9 Alibaba Cloud Object Storage OSS can upload object files through the console. What is the
largest object file that can be uploaded?
A. 1GB
B. 5GB
C. 10GB
D. 1TB
Answer: B
Explanation:
Using a single PUT upload through the console, the maximum file size is 5GB. For larger files,
multipart uploading should be used, which allows uploads up to 5TB by splitting files into smaller
parts.

NO.10 You are using Auto Scaling with one scaling group already created, then you want to execute
a task at a specific time such as removing 1 ECS instance every night at 00:00. To achieve this, which
of the following operations should be performed'? (Number of correct answers; 2)
A. Create a scaling rule
B. Create a scheduled task.
C. Create a new scaling group.
D. Create an event-triggered task.
Answer: A B
Explanation:
To execute a task at a specific time such as removing 1 ECS instance every night at 00:00, you need to
perform two operations: create a scaling rule and create a scheduled task. A scaling rule is a set of
instructions that defines how Auto Scaling scales computing resources in response to changes in
business load. A scheduled task is a type of scaling task that can execute a specified scaling rule at a
specified time. By creating a scaling rule that removes 1 ECS instance from the scaling group, and
creating a scheduled task that executes this scaling rule every night at 00:00, you can achieve the
desired result. You do not need to create a new scaling group, because you already have one scaling
group created. You also do not need to create an event-triggered task, because this type of scaling
task is triggered by events such as Cloud Monitor alarms or API calls, not by a specific time.
References: 1, 2, and 3.

NO.11 Alibaba Cloud Server Load Balancer (SLB) provides services for distributing traffic among
multiple ECS instances SLB can expand the application system's service capacity through traffic
distribution, and improve the system's availability by eliminating SPoFs (Single Points of Failure).
Which of the following statements are correct? (Number of correct answers; 2)
A. One of SLB's features is the Health Check. If some of the backend ECS instances are down,
whereas other backend ECS instances can still provide services, then the system can continue to work
normally.
B. When recreating an SLB instance that has an Internet IP address, a new Internet IP address will be
assigned to the SLB instance.
C. Before using SLB to provide external services, make sure that you have installed and correctly
configured the SLB agent on all of the backend ECS instances.

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 6ACP-Cloud1 real dumps

D. SLB provides a function to automatically synchronize data among backend ECS instances using
rsync remote synchronization.
Answer: A B
Explanation:
According to the Alibaba Cloud SLB documentation1, SLB provides a health check feature that
monitors the availability and performance of the backend servers. If a backend server fails the health
check, SLB stops routing requests to it and redirects the traffic to other healthy servers. This way, SLB
can improve the system' s availability by eliminating single points of failure (SPOFs). Therefore, option
A is a correct statement about SLB.
According to the same documentation1, SLB instances are assigned with public IP addresses or
private IP addresses based on the network type. If you delete an SLB instance and create a new one,
a new IP address will be allocated to the new instance. You cannot specify or reserve an IP address
for an SLB instance.
Therefore, option B is also a correct statement about SLB.
Option C is incorrect, because SLB does not require you to install or configure any SLB agent on the
backend servers. You only need to add the backend servers to the SLB instance and configure the
listener and the server group. SLB will automatically distribute the traffic to the backend servers
based on the load balancing algorithm and the health check status2.
Option D is also incorrect, because SLB does not provide a function to automatically synchronize data
among backend servers. SLB only handles the network traffic distribution and does not interfere with
the data on the backend servers. You need to use other methods or tools to synchronize data among
backend servers, such as rsync, lsyncd, or Alibaba Cloud Data Transmission Service (DTS)3.
References: Server Load Balancer:SLB overview, Add backend servers, and Data Transmission Service.

NO.12 SLB is a load balancing service that distributes traffic to multiple cloud servers It provides a
wide range of functions to meet the needs of various business scenarios If a user wants to use SLB
and ECS instances to deploy two-way authenticated HTTPS websites, the following statement is
correct_______.
A. SLB can only host SSL certificates, not CA certificates.
B. You need to host server SSL certificates and client CA certificates on SLB
C. SLB can only host CA certificates, not SSL certificate
D. SLB can only support HTTPS one-way authentication
Answer: B
Explanation:
SLB (Server Load Balancer) is a service that distributes network traffic across groups of backend
servers to improve the service capability and application availability1. SLB supports HTTPS listeners,
which allow you to encrypt the data transmission between clients and SLB instances2. HTTPS is a
secure version of HTTP that uses SSL/TLS protocols to provide data encryption, integrity, and
authentication3.
To use HTTPS listeners, you need to upload SSL certificates to SLB. SSL certificates are digital
certificates that use public key cryptography to verify the identity of a website and encrypt the data
exchanged between the website and the visitors4. There are two types of SSL certificates: server
certificates and client certificates.
Server certificates are issued by trusted certificate authorities (CAs) to verify the identity of the
website owner and the domain name. Client certificates are issued by the website owner to verify the

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 7ACP-Cloud1 real dumps

identity of the visitors5.

SLB supports both one-way and two-way authentication for HTTPS listeners. One-way authentication
means that only the server identity is verified by the client. Two-way authentication means that both
the server and the client identities are verified by each other. To use one-way authentication, you
only need to upload the server SSL certificate to SLB. To use two-way authentication, you need to
upload both the server SSL certificate and the client CA certificate to SLB. The client CA certificate is
the root certificate or intermediate certificate of the CA that issues the client certificates.
Therefore, if you want to use SLB and ECS instances to deploy two-way authenticated HTTPS
websites, you need to host server SSL certificates and client CA certificates on SLB. SLB can host both
SSL certificates and CA certificates, and it supports HTTPS two-way authentication. The other
statements are incorrect. References: Server Load Balancer(SLB) - Alibaba Cloud, Add an HTTPS
listener - Server Load Balancer - Alibaba Cloud Documentation Center, What is HTTPS? - SSL.com, Wh
at is an SSL Certificate? - SSL.com, What is a Client Certificate? - SSL.com, [Configure two-wa
y authentication for an HTTPS listener
- Server Load Balancer - Alibaba Cloud Documentation Center]

NO.13 Alibaba Cloud OSS is a cloud storage service that features massive capacity, outstanding
security, low cost, and high reliability. OSS uses multiple copies of data to achieve data redundancy
and can restore interrupted OSS services within two minutes when hardware failure occurs.
A. TRUE
B. FALSE
Answer: A
Explanation:
Alibaba Cloud OSS ensures high reliability and availability by maintaining multiple copies of data
across different physical locations, allowing it to recover within minutes in the event of hardware
failures. This redundancy mechanism provides strong data durability and service continuity.

NO.14 OSS supports deleting buckets. Before deleting a bucket, you must delete all the files in the
bucket, including incomplete upload segments.
A. TRUE
B. FALSE
Answer: A
Explanation:
In Alibaba Cloud OSS, a bucket cannot be deleted until all contents, including files and incomplete
multipart upload segments, are removed. This prevents accidental data loss by ensuring no objects
remain in the bucket before deletion.

NO.15 If you need to make the ECS instances under three VSwitches (inside the same Alibaba Cloud
VPC) unable to access each other, while not affecting other Intranet connections in this VPC, what
should you do?
A. Create three Security Groups, each containing all ECS instances under these three VSwitches. First,
configure each Security Group to allow access to all CIDR Blocks. Then, configure each Security Group
to forbid access to the CIDR blocks of the other two VSwitches (with this rule given higher priority
than the previous rule).
B. Create three Security Groups, each containing all ECS instances under these three VSwitches. First,

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 8ACP-Cloud1 real dumps

configure each Security Group to allow access to all CIDR Blocks. Then, configure each Security Group
to forbid access to the CIDR blocks of the other two VSwitches (with this rule given a lower priority
than the previous rule).
C. Create one Security Group containing all ECS instances under these three VSwitches. First,
configure the Security Group to allow access to all CIDR Blocks. Then, configure the Security Group to
forbid access to the CIDR blocks of the other two VSwitches (with this rule given higher priority than
the previous rule).
D. None of these answers are correct.
Answer: A
Explanation:
To isolate ECS instances within different VSwitches in a VPC while allowing them to access the
internet and other intranet resources, each VSwitch's instances should be in separate Security
Groups. By configuring each group to allow all VPC CIDR blocks first and then restricting access to
other VSwitch CIDR blocks with a higher priority rule, instances in each VSwitch are isolated without
affecting the VPC's external connections.
This approach follows Alibaba Cloud's Security Group best practices and CIDR-based access control
within VPC environments.

NO.16 An online education website is built based on ECS. SLB and Auto Scaling, which greatly
reduces resource cost, O&M cost and without compromising system stability and user experience.
Now. the website admin wants to keep the user information (such as source IP, accessed URLs, and
duration on each page) for analysis to support their upcoming campaign events In this case, which of
the following statements is NOT correct?
A. Let each ECS instance in the scaling group keeps the user access information it processes Thus, the
data saved by these ECS instances can be accessed and analyzed at any time, making the solution not
only simple, but also efficient reliable, and cost-effective.
B. Save user-related access information to ApsaraDB for RDS in real time or quasi real time, which
can then be used for performing query and analysis.
C. Synchronize user-Synchronize user-related access information to ApsaraDB for Memcache in real
time or quasi real time. Then, access Memcache using an application or make the data in Memcache
persistent based on certain rules and then can use the persistent data for further analysis.
D. Synchronize user-related access information to OSS in real time or quasi real time for further use
Answer: A
Explanation:
This statement is not correct because it is not a good practice to store user access information on
each ECS instance in the scaling group. This is because the ECS instances are dynamic and can be
added or removed by the Auto Scaling service based on the load and demand. Therefore, the data
stored on the ECS instances may be lost or inconsistent if the instances are terminated or replaced.
Moreover, this approach does not provide a centralized and unified way to access and analyze the
data, which may affect the accuracy and efficiency of the analysis. Therefore, it is better to use other
services such as ApsaraDB for RDS, ApsaraDB for Memcache, or OSS to store the user access
information in a persistent and scalable manner. References: Auto Scaling, ApsaraDB for RDS,
ApsaraDB for Memcache, OSS

NO.17 Alibaba Cloud Server Guard provides brute-force password cracking protection. Therefore,

ACP-Cloud1 PDF dumps, ACP-Cloud1 dumps training, 9ACP-Cloud1 real dumps

users who have activated Server Guard neither need to modify the administrator password of their
ECS instances periodically nor need to set a complicated password.
A. TRUE
B. FALSE
Answer: B
Explanation:
Even with Alibaba Cloud Server Guard enabled, it is still recommended to periodically change
passwords and use complex passwords to improve security. Server Guard provides additional
protection but is not a substitute for strong password practices.

NO.18 Alibaba Cloud Object Storage Service (OSS) is a cloud storage service that features massive
capacity, outstanding security, low costs, and high reliability. In an OSS bucket, all elements are
stored as________.
A. Hashes
B. Keys
C. Objects
D. Stubs
Answer: C
Explanation:
OSS does not use a hierarchical structure for objects, but instead uses a flat structure. All elements
are stored as objects in buckets. To use OSS in the same manner in which local file systems are used,
you can configure Cloud Storage Gateway (CSG).
https://www.alibabacloud.com/help/doc-detail/31817.htm
The statement C is correct, because in an OSS bucket, all elements are stored as objects. An object is
the basic unit of OSS storage. Each object consists of a unique key, data, and metadata. The key is the
name of the object, which is used to identify the object in a bucket. The data is the content of the
object, which can be any type of file, such as text, image, video, or audio. The metadata is the
information about the object, such as its size, type, creation time, and custom attributes. References:
= Object Storage Service:Overview - Alibaba Cloud