[Jul 28, 2024] Get New ACP-Cloud1 Certification – Valid Exam Dumps Questions
100% Passing Guarantee - Brilliant ACP-Cloud1 Exam Questions PDF
Alibaba Cloud ACP-Cloud1 (ACP Cloud Computing Professional) Certification Exam is a globally recognized certification that validates an individual's expertise in cloud computing. The ACP-Cloud1 certification exam is designed to test an individual's knowledge and skills in cloud computing, covering various aspects of cloud computing, including deployment, management, and security.
Alibaba Cloud ACP-Cloud1 exam is a comprehensive exam that covers a broad range of topics related to cloud computing. It consists of multiple-choice questions and requires candidates to demonstrate practical knowledge and skills in cloud computing. ACP-Cloud1 exam is conducted online and can be taken from anywhere in the world.
NEW QUESTION # 16
SLB is a load balancing service that distributes traffic to multiple cloud servers It provides a wide range of functions to meet the needs of various business scenarios If a user wants to use SLB and ECS instances to deploy two-way authenticated HTTPS websites, the following statement is correct_______.
- A. SLB can only support HTTPS one-way authentication
- B. You need to host server SSL certificates and client CA certificates on SLB
- C. SLB can only host CA certificates, not SSL certificate
- D. SLB can only host SSL certificates, not CA certificates.
Answer: A
NEW QUESTION # 17
When using Alibaba Cloud SLB to forward layer 7 (HTTP) service requests. SLB will replace the IP address in the HTTP header file to forward requests.
Therefore the source IP address that can be seen on the backend ECS instance is the IP address of SLB instead of the clients real IP address.
- A. True
- B. False
Answer: A
NEW QUESTION # 18
Compared with traditional physical servers, upgrading an ECS instance is much easier. Which of the following statements about upgrading an ECS instance is false?
- A. Upgrading the configuration of the ECS instance requires no' redeployment or data migration.
- B. You can change an instance's operating system without rebooting.
- C. Upgrading network bandwidth does not require the ECS instance to restart.
- D. You can upgrade the CPU, memory, and bandwidth.
Answer: C
NEW QUESTION # 19
Many cloud computing service providers support users to activate/create a cloud service through Open API.
Which of the following protocols is most not likely to be supported by these Open API?
- A. HTTP
- B. Web Service
- C. PPPoE
- D. Restful
Answer: C
Explanation:
Explanation
PPPoE stands for Point-to-Point Protocol over Ethernet, which is a network protocol that encapsulates PPP frames in Ethernet frames and allows multiple computers to share a single Internet connection. PPPoE is typically used by Internet service providers (ISPs) to provide broadband access to their customers, such as DSL or cable modem. PPPoE is not a protocol that is commonly supported by Open API for cloud computing service providers, because it is not designed for web-based communication and requires a dedicated connection between the client and the server. Open API, on the other hand, is a term that refers to a set of publicly available application programming interfaces (APIs) that allow developers to access the functionality and data of cloud computing service providers. Open API usually follows standard protocols that are widely used on the web, such as HTTP, Restful, and Web Service. HTTP stands for Hypertext Transfer Protocol, which is the foundation of data communication on the web. HTTP defines how messages are formatted and transmitted, and what actions web servers and browsers should take in response to various commands. HTTP is a stateless protocol, which means that each request is independent and does not depend on any previous requests or responses. Restful stands for Representational State Transfer, which is an architectural style for designing web services that are based on the concept of resources. Restful web services use HTTP methods (such as GET, POST, PUT, and DELETE) to perform operations on resources, and use standard formats (such as JSON or XML) to exchange data. Restful web services are stateless, scalable, and cacheable, and aim to provide a uniform interface for interacting with different types of resources. Web Service is a generic term that refers to any software service that is available over the web and uses a standardized format for communication, such as SOAP or REST. Web Service allows different applications to communicate and exchange data across different platforms and languages. Web Service can be described using a specification language, such as WSDL or OpenAPI, which defines the structure, operations, and parameters of the service. Web Service can also be registered and discovered using a directory service, such as UDDI or Swagger.
NEW QUESTION # 20
Alibaba Cloud Content Delivery Network (CDN) performs content acceleration with the support of intelligent DNS resolution The following function_________is NOT included in intelligent DNS resolution.
- A. The intelligent DNS resolution can parse the same domain name into different IP addresses based on the IP of different visitors.
- B. A user request is directed to the server nearest to the customer based on location information of the pre-configured IP section.
- C. If a user activates mirror sites in different IDCs, intelligent DNS resolution can achieve load balancing by guiding customers in different places to different mirror sites.
- D. The intelligent DNS resolution supports web page content caching. A user will receive data from the origin site at first-time access, and then will be reading data from cache in subsequent requests
Answer: C
NEW QUESTION # 21
Recently, response speed of a certain Alibaba Cloud Elastic Compute Service (ECS) instance is unacceptably slow. By using CloudMonitor we discovered that the ECS instance utilizes more than 80% of the assigned bandwidth.
Which of the following approach can address this issue and without the need to reboot the ECS instance?
- A. Upgrade the CPU and memory of the ECS ins
- B. Add a disk to the ECS instance
- C. None of the above
- D. Upgrade the bandwidth of the ECS instance
Answer: D
Explanation:
Explanation
According to the Alibaba Cloud Elastic Compute Service documentation, if the current public bandwidth does not meet your business requirements, you can upgrade or downgrade the public bandwidth configurations without the need to reboot the ECS instance. This can improve the network performance and response speed of the ECS instance. Upgrading the CPU, memory, or disk of the ECS instance may not solve the issue of bandwidth utilization, and may require rebooting the ECS instance. References: Public bandwidth - Elastic Compute Service
NEW QUESTION # 22
A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that
1. Must support secured remote O&M because the administrator often takes business trips.
2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)
- A. Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.
- B. Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace).
The administrator uses VPN encrypted communication during O&M. - C. Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.
- D. Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.
Answer: A,B,C
Explanation:
Explanation
To meet the company's security requirements, the following solutions should be used together:
A: Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace).
The administrator uses VPN encrypted communication during O&M. This solution can support secure remote O&M, because VPN (Virtual Private Network) is a technology that creates a secure and encrypted connection over the Internet between the bastion host and the administrator's device. VPN can protect the data transmitted between the bastion host and the administrator from being intercepted or tampered by malicious third parties1. Alibaba Cloud provides VPN Gateway service that allows users to create VPN connections between VPCs and on-premises data centers, or between VPCs in different regions2. Users can also use VPN images from Alibaba Cloud Marketplace, such as OpenVPN, to create VPN servers on ECS instances3.
B: Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems. This solution can also support secure remote O&M, because a bastion host is a special-purpose ECS instance that acts as a proxy or a gateway for accessing other ECS instances in the VPC. A bastion host can enhance the security of the ECS instances by limiting the exposure of the ECS instances to the public network, and by implementing security policies and monitoring tools on the bastion host4. Alibaba Cloud provides Bastionhost service that allows users to centrally manage the access to cloud servers from external networks and provide secure connections to VPC resources5.
C: Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups. This solution can isolate the networks between subsystems, because a security group is a virtual firewall that controls the inbound and outbound traffic of the ECS instances in the group. Users can configure security group rules to allow or deny access based on the network protocol, port, and source IP address. By deploying ECS instances running different subsystems to independent security groups, users can prevent unauthorized access or communication between the subsystems6.
The other solution is not suitable for the company's scenario, for the following reason:
D: Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups. This solution cannot isolate the networks between subsystems, because ECS instances in the same security group can communicate with each other by default, regardless of whether they have intranet or internet IP addresses. Moreover, this solution may also prevent the ECS instances from accessing the internet or providing external services, which may affect the business operation of the company6.
References: What is a VPN? - Virtual Private Network - Cisco, VPN Gateway - Alibaba Cloud, OpenVPN - Alibaba Cloud Marketplace, Bastion Host - Alibaba Cloud Document Center, Bastionhost - Alibaba Cloud, Security groups - Elastic Compute Service - Alibaba Cloud
NEW QUESTION # 23
Alibaba Cloud Object Storage Service (OSS) is a cloud storage service that features massive capacity, outstanding security, low costs, and high reliability. In an OSS bucket, all elements are stored as________.
- A. Hashes
- B. Stubs
- C. Objects
- D. Keys
Answer: C
Explanation:
OSS does not use a hierarchical structure for objects, but instead uses a flat structure. All elements are stored as objects in buckets. To use OSS in the same manner in which local file systems are used, you can configure Cloud Storage Gateway (CSG).
https://www.alibabacloud.com/help/doc-detail/31817.htm
NEW QUESTION # 24
An online education website is built based on ECS. SLB and Auto Scaling, which greatly reduces resource cost, O&M cost and without compromising system stability and user experience.
Now. the website admin wants to keep the user information (such as source IP, accessed URLs, and duration on each page) for analysis to support their upcoming campaign events In this case, which of the following statements is NOT correct?
- A. Synchronize user-related access information to OSS in real time or quasi real time for further use
- B. Let each ECS instance in the scaling group keeps the user access information it processes Thus, the data saved by these ECS instances can be accessed and analyzed at any time, making the solution not only simple, but also efficient reliable, and cost-effective.
- C. Save user-related access information to ApsaraDB for RDS in real time or quasi real time, which can then be used for performing query and analysis.
- D. Synchronize user-Synchronize user-related access information to ApsaraDB for Memcache in real time or quasi real time. Then, access Memcache using an application or make the data in Memcache persistent based on certain rules and then can use the persistent data for further analysis.
Answer: B
Explanation:
Explanation
This statement is not correct because it is not a good practice to store user access information on each ECS instance in the scaling group. This is because the ECS instances are dynamic and can be added or removed by the Auto Scaling service based on the load and demand. Therefore, the data stored on the ECS instances may be lost or inconsistent if the instances are terminated or replaced. Moreover, this approach does not provide a centralized and unified way to access and analyze the data, which may affect the accuracy and efficiency of the analysis. Therefore, it is better to use other services such as ApsaraDB for RDS, ApsaraDB for Memcache, or OSS to store the user access information in a persistent and scalable manner. References: Auto Scaling, ApsaraDB for RDS, ApsaraDB for Memcache, OSS
NEW QUESTION # 25
A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that
1. Must support secured remote O&M because the administrator often takes business trips.
2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)
- A. Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.
- B. Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.
- C. Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.
- D. Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M.
Answer: A,B,D
NEW QUESTION # 26
When the "'Obtain the Visitor's Real IP Address" function is enabled in Alibaba Cloud SLB For layer 7 services, you can obtain the real IP addresses of visitors through the______________field in HTTP header
- A. Authorization
- B. X-Forwarded-For
- C. Connection
- D. Etag
Answer: C
NEW QUESTION # 27
Names of the files in each OSS bucket must be unique Also, they can be renamed.
- A. True
- B. False
Answer: B
NEW QUESTION # 28
Alibaba Cloud Content Delivery Network (CDN) is a distributed network that is built and overlaid on the bearer network Moreover it is composed of edge node server clusters distributed across different regions. It replaces the traditional data transmission mode, which is centered on Web servers. When using Alibaba Cloud CDN, a user's request wilt first reach the edge node, and then receive data from the origin site by means of back-to-source Moreover, the admin can obtain visitor's real IP on the origin site. Which of the following descriptions relate to "obtaining visitors real IP" are correct? (Number of correct answers: 2)
- A. You can one-step activate the "recording visitor's real IP" function in Alibaba Cloud CDN console to directly view the visitor's real IP in the access log.
- B. "Visitor's real IP" is saved in "X-Forwarded-For" header in HTTP protocol. It can be directly obtained in the user-defined LOG of Apache and Nginx.
- C. In Windows, if IIS is used: after installing "F5XForwardedFor" extension module. 'Visitor's real IP" can then be seen in the log.
- D. "Visitor's real IP" can only be obtained by modifying the application
Answer: B,C
NEW QUESTION # 29
Once ECS is created, you can't change its private IP address anymore.
- A. True
- B. False
Answer: B
Explanation:
Explanation
You can change the private IP address of an ECS instance after it is created, but you need to stop the instance first. The private IP address must be within the CIDR block of the VPC and the VSwitch that the instance belongs to. You can modify the private IP address of an instance by using the console or the API.
References: 3, ACP Cloud Computing Certification - Alibaba Cloud Academy After stopping an Alibaba Cloud Elastic Compute Service (ECS) instance, you will still be charged for some resources related to that ECS instance, such as disks, snapshots, and public IP addresses, until you release them. The charging policy depends on the billing method and network type of the ECS instance. For pay-as-you-go instances, you can choose whether to enable the No fees for stopped instances feature, which allows you to stop paying for vCPUs and memory when the instance is stopped. However, this feature is only available for VPC-connected instances in some regions1. For subscription instances, you will be charged for the entire subscription period regardless of whether the instance is running or stopped2. References:
1: Billing FAQ - Elastic Compute Service - Alibaba Cloud Documentation Center1
2: Billing overview - Elastic Compute Service - Alibaba Cloud Documentation Center2
NEW QUESTION # 30
Which of the following ports does RDS for MySQL listen on by default?
- A. Port 3306
- B. Port 3600
- C. Port 8080
- D. Port 3060
Answer: A
NEW QUESTION # 31
A new media company uses a mobile app to provide news and information services. They utilize Auto Scaling to add/reduce ECS instances dynamically to address service traffic spikes.
Based on the estimation of their service and technical personnel the company thinks they require 10 ECS instances during idle hours and 10 to 20 ECS instances (dynamically adjusted) during some busy hours, which are normally from 07:30 to 09:00 and from 18:30 to 20:00 In the scaling group; they set the "Minimum number of instances" to 10 and "Maximum number of instances" to 20.
To simplify deployment tasks and save costs, which of the following scaling modes should they choose?
- A. Fixed quantity mode
- B. Event-triggered mode
- C. Scheduled mode
- D. Healthy mode
Answer: A
NEW QUESTION # 32
Before data communication is setup, the security groups match the security group rules one by one to query whether to allow access requests Assume that the user has created two security group rules 1 and 2 The protocol type, port range, authorization type, and authorization object of the two security group rules are the same. The difference is that Rule 1 is a denial policy, rule 2 is an allowed policy, so the following statement is correct_______ (Number of correct answers 2)
- A. If rule 1 and rule 2 have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect
- B. If rule 1 and rule 2 have different priorities, the rule with a small priority number takes effect
- C. If rule 1 and rule 2 have the same priority, the rule of the allowed policy takes effect first, and the rule that of the denial policy does not take effect.
- D. If rule 1 and rule 2 have different priorities, the rule with a large priority number takes effect.
Answer: A,B
Explanation:
Explanation
Before data communication is set up, the security groups match the security group rules one by one to query whether to allow access requests. If the protocol type, port range, authorization type, and authorization object of two security group rules are the same, the following rules apply:
If the two rules have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect. This is because the security group rules follow the principle of minimum permission, which means that the most restrictive rule is applied when there is a conflict.
If the two rules have different priorities, the rule with a smaller priority number takes effect. This is because the security group rules follow the principle of priority, which means that the rule with a higher priority (lower number) is applied when there is a conflict. References: ECS Security Groups - Alibaba Fundamentals - Cloud Academy, Security group rules - Elastic Compute Service - Alibaba Cloud Documentation Center
NEW QUESTION # 33
All RDS for MySQL backups are full backups.
- A. True
- B. False
Answer: A
NEW QUESTION # 34
An enterprise hosts their servers (include both Linux and Windows servers) in a traditional IDC Every night hackers with IP addresses from many countries try to crack the password of their servers, making the administrator terribly worried about this However because of work requirements the remote management port of these servers must be opened to public network.
The administrator heard that Alibaba Cloud has solutions that can help customers improve the security of their systems Therefore, he/she wants to migrate the system to Alibaba Cloud. Which of the following functions should the administrator activate in Alibaba Cloud to reduce the possibility of brute force password cracking?
- A. CloudMonitor
- B. Security Center
- C. Anti-DDoS Origin Basic Edition
- D. Cloud Firewall
Answer: D
NEW QUESTION # 35
Which of the following privilege is required to manually install Alibaba Clod Security Center on the server?
- A. FTP service privilege
- B. Common user privilege
- C. Database Access privilege
- D. System administrator privilege
Answer: D
Explanation:
Explanation
To manually install Alibaba Cloud Security Center on the server, you need to have the system administrator privilege. This is because the Security Center agent requires access to the system files and processes, and can perform security operations such as vulnerability scanning, intrusion detection, and threat blocking. A common user privilege or a database access privilege is not sufficient to install the Security Center agent. An FTP service privilege is irrelevant to the installation process.
NEW QUESTION # 36
......
Free ACP-Cloud1 braindumps download: https://validexam.pass4cram.com/ACP-Cloud1-dumps-torrent.html