Free Alibaba Cloud ACA-Cloud1 Study Guides Exam Questions & Answer [Q37-Q59]

Rate this post

Free Alibaba Cloud ACA-Cloud1 Study Guides Exam Questions and Answer

ACA-Cloud1 Exam Dumps, ACA-Cloud1 Practice Test Questions

Alibaba Cloud ACA-Cloud1 certification exam covers a wide range of topics, including cloud computing architecture, cloud storage and networking, virtualization, security, and scalability. Candidates are expected to have a solid understanding of these concepts and be able to apply them to real-world scenarios. ACA-Cloud1 exam is designed to be challenging, and candidates must demonstrate their mastery of the subject matter in order to pass.

NEW QUESTION 37
A/Anis a copy of data on a disk at a certain point in time.

image

snapshot

template

EIP

NEW QUESTION 38
Which of the following is not the database type supported by RDS?

MySQL

SQL Server

Postgre SQL

Oracle database

NEW QUESTION 39
Alibaba Cloud relational database service (RDS) is a stable, reliable and elastic online database service. RDS supports below database types? (Choose three.)

MySQL

SQL Server

PostgreSQL

Oracle database

NEW QUESTION 40
Alibaba Cloud Object Storage Service (OSS) is a massive, highly available, secured and cost effective storage service. One of the special characteristics of OSS is its superior data reliability, because of its underlying backup technology and policies. Which of the following statement about OSS backup is correct?

OSS supports 3 internal data copies, no human intervention is required to recover the data when anything goes wrong.

OSS leverages RAID0+1 configuration of its underlying physical hard disks. There is no impact even if 2 hard disks were to fail simultaneously.

Customer has to safeguard their own data. OSS provides various backup interfaces to facilitate offsite backups.

OSS supports 3 internal data copies, so the data can be manually recovered should there be any problem.

NEW QUESTION 41
You can an ECS instance’s configuration. (Choose two.)

upgraded

downgraded

downloaded

uploaded

NEW QUESTION 42
A customer uses Alibaba Cloud Auto Scaling service and creates a scaling group. He/she sets the “Minimum number of instances” to 6 and “Maximum number of instances” to 8.
After correctly configuring scaling settings, the customer adds a scaling rule “Adjust to 10 ECS instances”, and creates a scheduled task based on this rule.
And then, the customer checks the scaling group and see it already contains 6 valid ECS instances, he/she then enables this scaling group immediately.
How many ECS instances are left in the scaling group when the scheduled task is activated once?

Eight

Ten

Six

Five

NEW QUESTION 43
Server Load Balancer can help protect from attack.

DDoS

Virus

Ransomware

SQL injection

NEW QUESTION 44
You can __________________ an ECS instance’s configuration. (Choose two.)

upgraded

downgraded

downloaded

uploaded

NEW QUESTION 45
Company A builds a sales management platform based on Alibaba Cloud services, using 3 ECS instances. One of the ECS instance has MySQL installed as the database server of the platform, the other two are used as WEB servers. After some time, due to the rapid increase of employees and sales analysis requests, the performance of the platform is challenged in terms of response time. Through CloudMonitor, it is found that the average CPU usage reaches 70% for the two WEB server ECS instances and the database load reaches
75% for the database server ECS instance. In this situation, company A may choose which Alibaba Cloud services to improve the performance. (Choose two.)

Use content delivery network, CDN, to accelerate the caching of the platform’s css, JavaScript files etc.

By adding a SLB instance and increase the number of ECS instances to reduce the work load on current ECS instances.

Use RDS to replace existing self-built database, in order to obtain better database performance; also creating RDS read-only instances to handle read-only requests, hence reduce the work load on master RDS instance.

Import data into OSS to share the storage load of the platform.

NEW QUESTION 46
An enterprise hosts their servers (include both Linux and Windows servers) in a traditional IDC. Every night hackers with IP addresses from many countries try to crack the password of their servers, making the administrator terribly worried about this. However, because of work requirements, the remote management port of these servers must be opened to public network.
The administrator heard that Alibaba Cloud has solutions that can help customers improve the security of their systems. Therefore, he/she wants to migrate the system to Alibaba Cloud. Which of the following functions should the administrator activate in Alibaba Cloud to reduce the possibility of brute force password cracking?

CloudMonitor

Server Guard

Anti-DDoS Basic Service

Situation Awareness

Explanation
Server Guard is a cloud-based security service that provides real-time protection for servers against intrusion events, such as brute force password cracking. Server Guard consists of a lightweight agent that is installed on the server and a cloud protection center that analyzes and responds to security threats. Server Guard can help the administrator to reduce the possibility of brute force password cracking by providing the following features1:
Password cracking protection: Server Guard can detect and block password cracking attempts on servers, such as SSH brute force attacks on Linux servers and RDP brute force attacks on Windows servers. Server Guard can also alert the administrator of the attack source, time, and frequency, and provide suggestions for password strengthening.
Webshell detection and removal: Server Guard can scan and remove webshells that are maliciously implanted on servers by hackers. Webshells are scripts that allow hackers to remotely execute commands on servers, such as stealing data, uploading files, or launching attacks. Server Guard can identify and delete webshells based on signature matching, behavior analysis, and machine learning.
Anti-virus and anti-ransomware: Server Guard can detect and terminate various types of malware, such as ransomware, mining programs, backdoor programs, worms, and trojans. Server Guard can also prevent the encryption and deletion of files by ransomware, and restore the files to their original state.
Security baseline check: Server Guard can perform security baseline checks on servers to evaluate their security posture and compliance level. Server Guard can check more than 40 security items, such as system configuration, account management, network security, and log audit. Server Guard can also provide security hardening suggestions and one-click fixes for the detected issues.
Security situation awareness: Server Guard can provide a comprehensive and visualized view of the security situation of the servers, such as the number of attacks, the attack sources, the attack types, the attack trends, and the security score. Server Guard can also provide security reports and recommendations for improving the security level of the servers. References: Security Center

NEW QUESTION 47
You can create a custom image for ECS using which of the followings? (Choose two.)

Data disk snapshot

CPU snapshot

Memory snapshot

System disk snapshot

NEW QUESTION 48
Which of the following is not the database type supported by RDS?

MySQL

SQL Server

Postgre SQL

Oracle database

NEW QUESTION 49
SQL injection is a common application layer attack, usually through building special input parameters and pass it to web applications to steal or sabotage the application data. Which of the following is the target for SQL injection?

Web application

Database

Confidential files on the server

Pictures on server

NEW QUESTION 50
Server Load Balancer supports protocols like. (Choose four.)

HTTP

HTTPS

TCP

UDP

MPLS

MQTT

NEW QUESTION 51
RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning.

TRUE

FALSE

NEW QUESTION 52
ECS can be used along with_____to store static images, videos, and reducing storage fees.

OSS

Server Load Balancer

RDS

VPC

Explanation
ECS can be used along with OSS to store static images, videos, and reducing storage fees. OSS is a fully managed object storage service that provides industry-leading scalability, durability, and performance. OSS can store any amount of data from anywhere, such as static images, videos, backup files, and so on. ECS is a cloud computing service that provides elastic and secure virtual cloud servers. ECS can access OSS resources by using an internal endpoint of OSS, which reduces the network latency and the traffic costs. By using ECS and OSS together, you can benefit from the following advantages1:
Improved user experience: You can use OSS to store and deliver static content, such as images and videos, to your users. OSS integrates with CDN products to provide reliable, scalable, flexible, and cost-effective content distribution solutions. You can use ECS to run dynamic applications, such as web servers and databases, that require high performance and availability. ECS provides fast memory and the latest CPUs to help you power your cloud applications and achieve faster results with low latency.
Reduced storage fees: You can use OSS to store large amounts of data at a low cost. OSS offers four tiers of storage: Standard, Infrequent Access, Archive, and Cold Archive. Each tier is cost-optimized for specific storage patterns. You can use lifecycle policies to automatically transition your data to the appropriate storage tier based on your business needs. You can also use Storage Capacity Unit to plan your storage budget and usage in one place. You can use ECS to scale your computing resources up or down based on real-time demands. ECS supports pay-as-you-go and different capacity reservation plans.
You can also use spot instances to reduce your computing costs by up to 90%.
Enhanced security: You can use OSS to protect your data from unauthorized access, deletion, or modification. OSS supports encryption at rest and in transit, anti-leech protection, bucket policies, RAM roles, and more. You can also use your own key (BYOK) encryption to ensure your data is encrypted when it is stored in the cloud platform. You can use ECS to secure your cloud servers from network attacks, such as DDoS and brute force attacks. ECS supports security groups, firewalls, VPCs, SSL certificates, and more. You can also use Resource Access Management (RAM) to control the access permissions of your ECS instances and OSS buckets. References: Use Alibaba Cloud CDN to accelerate access to OSS

NEW QUESTION 53
Auto Scaling is a management service that can automatically adjust elastic computing resources based on your business needs and policies. Which of the following is not the feature supported by Alibaba Cloud Auto Scaling?

Elastic Scale-Out

Elastic Scale-In

Elastic Self-Health

Elastic Self-Diagnostic

NEW QUESTION 54
As a cloud computing service provider, Alibaba Cloud provides security services including________. (Choose two.)

Security operation for underlying hardware of cloud computing.

Application maintenance in ECS instances.

Security isolation between cloud computing tenants.

IP white list setting for RDS.

NEW QUESTION 55
Alibaba Cloud OSS is a cloud storage service that features massive capacity, outstanding security, low cost, and high reliability. To control the access to the files stored on OSS, OSS provides multiple access permissions for each bucket. These bucket permissions are. (Choose three.)

Private-read

Public-read-write

Public-read

Private

NEW QUESTION 56
You are developing a highly available web application using stateless web servers. Which services are suitable for the application? (Choose three.)

RDS

SLB

ECS

MaxCompute

OSS

NEW QUESTION 57
You canan ECS instance’s configuration. (Choose two.)

upgraded

downgraded

downloaded

uploaded

Explanation
You can upgrade or downgrade an ECS instance’s configuration to meet your business needs. Upgrading an instance’s configuration means increasing the vCPUs, memory, bandwidth, or disk capacity of the instance.
Downgrading an instance’s configuration means decreasing the vCPUs, memory, bandwidth, or disk capacity of the instance. You can change the configuration of an ECS instance by using one of the following methods1:
Change the instance type: You can change the instance type of an ECS instance to adjust the vCPUs and memory of the instance. You can change the instance type of an ECS instance in the following scenarios2:
The instance is in the Stopped state and uses a pay-as-you-go billing method.
The instance is in the Running state and uses a subscription billing method, and the new instance type belongs to the same instance family as the original instance type.
Change the bandwidth configuration: You can change the bandwidth configuration of an ECS instance to adjust the network performance of the instance. You can change the bandwidth configuration of an ECS instance in the following scenarios3:
The instance is in the Stopped state and uses a pay-as-you-go billing method, and the instance is not associated with an EIP.
The instance is in the Running state and uses a subscription billing method, and the instance is not associated with an EIP.
Change the system disk or data disk: You can change the system disk or data disk of an ECS instance to adjust the disk capacity or performance of the instance. You can change the system disk or data disk of an ECS instance in the following scenarios4:
The instance is in the Stopped state and uses a pay-as-you-go billing method, and the disk is not encrypted.
The instance is in the Running state and uses a subscription billing method, and the disk is not encrypted. References: 1: Overview of instance configuration changes – Alibaba Cloud2: Change the instance type of an ECS instance – Alibaba Cloud3: Change the bandwidth configuration of an ECS instance – Alibaba Cloud4: Change the system disk or data disk of an ECS instance – Alibaba Cloud.

NEW QUESTION 58
Alibaba Cloud OSS is a cloud storage service that features massive capacity, outstanding security, low cost, and high reliability. To control the access to the files stored on OSS, OSS provides multiple access permissions for each bucket. These bucket permissions are ____________. (Choose three.)

Private-read

Public-read-write

Public-read

Private

NEW QUESTION 59
You built an online shop using Alibaba Cloud services (ECS, RDS, …etc.) and very soon you’ll have a campaign that every customer that invites 3 friends will get a 50% off coupon. To avoid HTTP flood attacks and ensure only genuine customers (not bots) joining the event, which security product should you choose?

Anti-DDoS Basic

Anti-DDoS pro

WAF

Server Guard