ACP-Cloud1 Certification – Valid Exam Dumps Questions Study Guide! (Updated 72 Questions) [Q40-Q57]

Rate this post

ACP-Cloud1 Certification – Valid Exam Dumps Questions Study Guide! (Updated 72 Questions)

ACP-Cloud1 Dumps are Available for Instant Access using TestSimulate

Alibaba Cloud ACP-Cloud1 certification is an industry-recognized certification that demonstrates the candidate’s expertise and skills in cloud computing. ACP Cloud Computing Professional certification is highly valuable for IT professionals who want to advance their careers in cloud computing. ACP Cloud Computing Professional certification validates the candidate’s knowledge and skills in cloud architecture design, deployment, security, and maintenance. The ACP-Cloud1 certification is an essential requirement for cloud architects, cloud engineers, cloud administrators, and other IT professionals who work with cloud-based technologies.

NEW QUESTION 40
Before data communication is setup, the security groups match the security group rules one by one to query whether to allow access requests Assume that the user has created two security group rules 1 and 2 The protocol type, port range, authorization type, and authorization object of the two security group rules are the same. The difference is that Rule 1 is a denial policy, rule 2 is an allowed policy, so the following statement is correct_______ (Number of correct answers 2)

If rule 1 and rule 2 have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect

If rule 1 and rule 2 have the same priority, the rule of the allowed policy takes effect first, and the rule that of the denial policy does not take effect.

If rule 1 and rule 2 have different priorities, the rule with a small priority number takes effect

If rule 1 and rule 2 have different priorities, the rule with a large priority number takes effect.

NEW QUESTION 41
A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that
1. Must support secured remote O&M because the administrator often takes business trips.
2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company’s requirements? (Number of correct answers: 3)

Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M.

Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.

Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.

Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.

NEW QUESTION 42
A Virtual Private Cloud (VPC) is an isolated network environment that is completely isolated from each other The following statements about VPC are correct_________. (Number of correct answers: 2)

Each VPC has an independent tunnel ID, and a tunnel ID corresponds to a virtualized network.

ECS instances in a VPC use security group firewalls for Layer 2 network access control.

Subnets can be divided like the traditional network environment. Different cloud servers within each subnet are connected by the same router and different subnets are interconnected by switches.

The internal networks of different VPCs are completely isolated and can be interconnected through IP addresses mapped to the outside.

NEW QUESTION 43
Alibaba Cloud Content Delivery Network (CDN) is a distributed network that is built and overlaid on the bearer network Moreover it is composed of edge node server clusters distributed across different regions. It replaces the traditional data transmission mode, which is centered on Web servers. When using Alibaba Cloud CDN, a user’s request wilt first reach the edge node, and then receive data from the origin site by means of back-to-source Moreover, the admin can obtain visitor’s real IP on the origin site. Which of the following descriptions relate to “obtaining visitors real IP” are correct? (Number of correct answers: 2)

“Visitor’s real IP” is saved in “X-Forwarded-For” header in HTTP protocol. It can be directly obtained in the user-defined LOG of Apache and Nginx.

“Visitor’s real IP” can only be obtained by modifying the application

You can one-step activate the “recording visitor’s real IP” function in Alibaba Cloud CDN console to directly view the visitor’s real IP in the access log.

In Windows, if IIS is used: after installing “F5XForwardedFor” extension module. ‘Visitor’s real IP” can then be seen in the log.

NEW QUESTION 44
Which of the following statements is most accurate about the Data Transmission Service (DTS) database migration function?

Supports database schema replication between instances.

Supports warning when source and destination has some unresolved conflict found.

Supports all of the above functions.

Supports migrating MySQL databases from external sources.

NEW QUESTION 45
A popular worldwide forum stores static resources in OSS and accelerates access using CON Users find that the speed of downloading files from the forum has been greatly improved, but uploading files is slow due to the long data transmission distance, resulting in a bad access experience In order to improve the speed of uploading files for users in this forum, so that users in different regions can have a good access experience, we recommend that the forum can________.

Activate the PCDN service

Activate OSS in different regions as file storage, and synchronize data between OSS in different regions through cross-region replication

Enable the transmission acceleration service for O: Enable OSS

Enable OSS static website hosting

NEW QUESTION 46
You are designing a solution for a startup company, the proposed solution is like this You suggest they use ECS instances to process requests from mobile App clients, and use SLB to distribute data traffic and ensure the load across each backend ECS instance is balanced.
Moreover to deal with volatile fluctuations in business volume (page views are much higher on the weekends), you also suggest they use Auto Scaling to dynamically increase or reduce computing resources.
The company is satisfied with the solution you proposed. However, they have one concern that when removing an idle instance from the scaling group: if Auto Scaling shuts the instance down directly, the service running on that instance will be abruptly terminated, resulting in poor user experience.
In order to eliminate your customer’s concern, which of the following solutions should you recommend them?

Find the ECS instance that is going to be removed from the backend server pool of the SLB instancer and automatically set the weight of this ECS instance to 0. This instance will not be assigned with new requests, and will be automatically removed from the backend server pool after existing tasks are completed.

First, insert a script into the image for creating the ECS instance Second, make the script run automatically when the operating system in this ECS instances is about to shut down. This script contains the processing logic that can ensure the instance finish all the remaining tasks before shutting down.

Find the ECS instance that is going to be removed from the backend server pool of the SLB instance, and manually remove this instance from the backend server pool Applications running on this ECS instance will normally return results, but this instance will not be assigned with new requests.

Use the Lifecycle Hook function embedded m Auto Scaling Define a suitable timeout and a web hook to do the necessary work before the instance is removed.

NEW QUESTION 47
Alibaba Cloud Object Storage Service (OSS) is a cloud storage service that features massive capacity, outstanding security, low costs, and high reliability. In an OSS bucket, all elements are stored as________.

Hashes

Keys

Objects

Stubs

NEW QUESTION 48
Once ECS is created, you can’t change its private IP address anymore.

True

False

NEW QUESTION 49
Many cloud computing service providers support users to activate/create a cloud service through Open API. Which of the following protocols is most not likely to be supported by these Open API?

HTTP

Restful

Web Service

PPPoE

NEW QUESTION 50
Many websites have suffered DDoS attacks of different volumes. Therefore, accurate understanding of DDoS attacks is critical to website security protection. Which of the following statements about DDoS attacks is the MOST accurate?

The purpose of a DDoS attack is to steal confidential information.

The main purpose of a DDoS attack is to prevent the target server from providing normal services.
Currently, the DDoS attack is one of the strongest and most indefensible website attacks.

A DDoS attacks crack the server’s logon password by means of a massive number of attempts.

DDoS attacks primarily target databases.

NEW QUESTION 51
For ECS and RDS instances under different Alibaba Cloud accounts but in the same region, which of the following statements is NOT correct for migrating self-built MySQL databases (running on ECS) to RDS?

The data can be imported via the Intranet

The data cannot be migrated.

The data can be imported via the public network.

The data can be imported by running mysqldump.

NEW QUESTION 52
An enterprise hosts their servers (include both Linux and Windows servers) in a traditional IDC Every night hackers with IP addresses from many countries try to crack the password of their servers, making the administrator terribly worried about this However because of work requirements the remote management port of these servers must be opened to public network.
The administrator heard that Alibaba Cloud has solutions that can help customers improve the security of their systems Therefore, he/she wants to migrate the system to Alibaba Cloud. Which of the following functions should the administrator activate in Alibaba Cloud to reduce the possibility of brute force password cracking?

Cloud Firewall

Anti-DDoS Origin Basic Edition

CloudMonitor

Security Center

NEW QUESTION 53
Object Storage Service (OSS) supports access logging. A bucket owner can activate access logging for their buckets in the OSS management console. When access logging is activated for bucket A, OSS automatically accesses the request logs for this bucket (in hours) and generates and writes an object to the user-specified bucket B according to certain naming rules. Which of the following statements is true for OSS logging?

Buckets A and B can be separate buckets (or a single bucket) but they must belong to the same user

Buckets A and B must be the same bucket.

Buckets A and B can belong to different users.

Buckets A and B must be different buckets.

NEW QUESTION 54
All RDS for MySQL backups are full backups.

True

False

NEW QUESTION 55
Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet functions currently provided by CloudMonitor? (Number of correct answers: 3)

Site monitoring

Customized monitoring

Custom firewall

Operation auditing

Cloud service monitoring

NEW QUESTION 56
Alibaba Cloud Object Storage Service (OSS) provides multiple file uploading modes for different scenarios, which are___________.
(Number of correct answers: 2)

Direct upload from the OSS management console no matter how large the file is

Uploading using the API

Directly copying to/from OSS using portable disks

Upload using the SDK

NEW QUESTION 57
RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning.

True

False

Alibaba Cloud ACP-Cloud1 Exam Practice Test Questions: https://www.testsimulate.com/ACP-Cloud1-study-materials.html

Leave a Reply Cancel reply