Alibaba Cloud ACP-Cloud1 Test Dumps

C.   System administrator privilege

Answer DescriptionExplanation: To manually install Alibaba Cloud Security Center on the server, you need to have the system administrator privilege. This is because the Security Center agent requires access to the system files and processes, and can perform security operations such as vulnerability scanning, intrusion detection, and threat blocking. A common user privilege or a database access privilege is not sufficient to install the Security Center agent. An FTP service privilege is irrelevant to the installation process.

A.   One of SLB's features is the Health Check. If some of the backend ECS instances are down, whereas other backend ECS instances can still provide services, then the system can continue to work normally.


B.   When recreating an SLB instance that has an Internet IP address, a new Internet IP address will be assigned to the SLB instance.

B.   False

Answer DescriptionExplanation: RDS for MySQL supports both full backups and incremental backups. A full backup is a complete backup of all data in a database. An incremental backup is a backup of only the data that has changed since the last backup. Incremental backups can reduce the backup time and storage space. You can configure the backup cycle and retention period for both types of backups in the RDS console or by using the API.

B.   False

Answer DescriptionExplanation: Alibaba Cloud SLB can distribute user requests to backend ECS instances, but these ECS instances do not have to have the same specification (CPU, Memory). SLB virtualizes the added group of ECS instances in the same region into an application pool, and you can manage backend servers through either the default server group, a primary server group, or VServer groups. You can add ECS instances of different specifications to the same server group or VServer group according to your needs. SLB supports weighted round-robin (WRR) and weighted least connections (WLC) algorithms to balance the load among backend servers with different weights.

A.   True

Answer DescriptionExplanation: When using Alibaba Cloud SLB to forward layer 7 (HTTP) service requests, SLB will replace the IP address in the HTTP header file to forward requests. Therefore, the source IP address that can be seen on the backend ECS instance is the IP address of SLB instead of the client’s real IP address. However, SLB also provides a feature called XForwarded- For (XFF) that can help you obtain the real IP address of the client. XFF is a standard HTTP header field that records the original IP address of the client and the proxy servers that the request passes through. You can enable XFF on the SLB console or by using the API, and then configure your backend ECS instance to parse the XFF header field and get the real IP address of the client.

B.   Use CEN to establish communication between VPCs

C.   The DNS service provider used by the domain name (such as abc.com) must support intelligent resolution.

Answer DescriptionExplanation: The DNS service provider used by the domain name (such as abc.com) does not need to support intelligent resolution, because the CNAME address allocated to the domain name will point to an IP address that is intelligently managed by Alibaba Cloud CDN system. Therefore, option C is not a correct description of modifying domain name resolution. References: What is Alibaba Cloud CDN? - CDN - Alibaba Cloud Documentation Center and Alibaba Cloud CDN

A.   True

Answer DescriptionExplanation: Auto Scaling is a service that automatically adjusts the number of ECS instances based on your business needs and policies. You can use Auto Scaling to cope with unpredictable or periodic workloads. Auto Scaling supports three scaling modes: scheduled, dynamic, and fixed1. Dynamic scaling mode allows you to automatically add or remove ECS instances based on CloudMonitor metrics, such as CPU utilization, memory utilization, inbound traffic, and outbound traffic2. You can configure scaling rules and scaling policies to define the conditions and actions for dynamic scaling. For example, you can set a scaling rule to add one ECS instance when the average CPU utilization of the scaling group exceeds 80% for five consecutive minutes3. Dynamic scaling mode is suitable for scenarios where you cannot predict service changes or do not have enough historical data to set a schedule4.

A.   True

Answer DescriptionExplanation: The Alibaba Cloud CDN can directly accelerate access to the files stored in OSS and reduce OSS traffic costs. Alibaba Cloud CDN is a global network of points of presence (POPs) that are distributed across the globe. Alibaba Cloud CDN serves to reduce back-to-origin traffic. This in turn prevents network congestion and ensures that content is delivered with minimal latency across regions in various use cases1. Alibaba Cloud CDN caches resources from your origin servers on POPs located across the globe. Whenever customers access your resources, the resources are served from the nearest POP instead of the origin server. This helps prevent lengthy back-to-origin requests and reduces loads on origin servers, delivering better experience to your customers and reducing back-to-origin costs1. Alibaba Cloud CDN also provides IPv6 support on some POPs1. You can use Alibaba Cloud CDN to accelerate access to Object Storage Service (OSS). If you directly access OSS resources, the access speed varies based on the region in which the buckets are located and is limited by the outbound bandwidth of OSS2. The Internet traffic cost of CDN is lower than that of OSS, and the back-to-source traffic cost from CDN to OSS is also lower than a user access to OSS directly2. Therefore, using CDN can reduce the traffic cost of OSS. References: Use Alibaba Cloud CDN to accelerate access to OSS, What is Alibaba Cloud CDN?

B.   False

Answer DescriptionExplanation: Alibaba Cloud provides comprehensive security protection covering networks, hosts, applications, databases, and content for on-cloud clients, but users still need to pay attention to security protection issues. Alibaba Cloud and its customers are jointly responsible for the security of customers’ applications built on Alibaba Cloud. With security responsibilities shared between Alibaba Cloud and its customers, Alibaba Cloud provides a secure infrastructure to decrease the enterprise security burden of customers. As such, customers can configure and use cloud products in a secure manner, thus relieving much of the underlying security burdens while allowing customers to focus more on their core business needs. However, customers still need to follow the best practices and guidelines for cloud security, such as using strong passwords, enabling multi-factor authentication, encrypting sensitive data, applying security patches, etc. Customers also need to monitor and manage the security risks and incidents of their cloud environment using Alibaba Cloud’s security products and services, such as Security Center, ActionTrail, Cloud Firewall, etc.