Alibaba ACA Cloud Computing Associate ACA-Cloud1 Exam Questions

Answer : B

Server Guard is a cloud-based security service that provides real-time protection for servers against intrusion events, such as brute force password cracking. Server Guard consists of a lightweight agent that is installed on the server and a cloud protection center that analyzes and responds to security threats.Server Guard can help the administrator to reduce the possibility of brute force password cracking by providing the following features1:

Password cracking protection: Server Guard can detect and block password cracking attempts on servers, such as SSH brute force attacks on Linux servers and RDP brute force attacks on Windows servers. Server Guard can also alert the administrator of the attack source, time, and frequency, and provide suggestions for password strengthening.

Webshell detection and removal: Server Guard can scan and remove webshells that are maliciously implanted on servers by hackers. Webshells are scripts that allow hackers to remotely execute commands on servers, such as stealing data, uploading files, or launching attacks. Server Guard can identify and delete webshells based on signature matching, behavior analysis, and machine learning.

Anti-virus and anti-ransomware: Server Guard can detect and terminate various types of malware, such as ransomware, mining programs, backdoor programs, worms, and trojans. Server Guard can also prevent the encryption and deletion of files by ransomware, and restore the files to their original state.

Security baseline check: Server Guard can perform security baseline checks on servers to evaluate their security posture and compliance level. Server Guard can check more than 40 security items, such as system configuration, account management, network security, and log audit. Server Guard can also provide security hardening suggestions and one-click fixes for the detected issues.

Security situation awareness: Server Guard can provide a comprehensive and visualized view of the security situation of the servers, such as the number of attacks, the attack sources, the attack types, the attack trends, and the security score. Server Guard can also provide security reports and recommendations for improving the security level of the servers.Reference:Security Center

Answer : A

Session persistence feature in Server Load Balancer means that it can forward the access requests from a single user to the same ECS instance within a certain period to ensure session continuity. This feature is useful for applications that require users to maintain a stateful connection with the backend servers, such as online shopping or banking. Session persistence can be enabled by configuring a cookie timeout period or a source IP hash method in the Server Load Balancer console.Reference:ACA Cloud Computing Certification - Alibaba Cloud Academy,Server Load Balancer - Alibaba Cloud Academy, Session Persistence - Alibaba Cloud Documentation Center

Answer : C

ApsaraDB RDS is a cloud-based relational database service that provides secure, cost-effective, and scalable database solutions for various applications. RDS has many advantages over self-built databases, such as high availability, automatic backup, and easy O&M. One of the statements that is wrong when comparing RDS with self-built database is that self-built database supports quick deployment and elastic scaling. This is not true, because self-built database requires users to purchase, install, and configure hardware and software by themselves, which can be time-consuming and complex. Moreover, self-built database cannot easily adjust the computing and storage resources according to the business needs, which can lead to over-provisioning or under-provisioning. RDS, on the other hand, supports quick deployment and elastic scaling, because users can create, modify, or delete RDS instances in minutes through the console or API. Users can also scale up or down the RDS instance specifications, storage capacity, or network bandwidth without affecting the business continuity.

ApsaraDB RDS

ACA Cloud Computing Certification Exam Preparation Course

Which of the following statements is NOT correct, when comparing RDS ...

Answer : C

A large shopping mall deploys a new video surveillance system. The five-floor building in which the mall is located installed 35 HD cameras to monitor the major exits. The surveillance system is deployed on an ECS instance, which has four 2 TB data disks to store video data.

However, video data grows rapidly and the engineers find that the ECS will run out of storage space within 2 weeks.

In this case, OSS is thought to be the best solution for addressing the storage challenge while ensuring quick access to historical video data when needed. OSS is a cloud-based object storage service that provides massive, secure, low-cost, and highly reliable storage for unstructured data such as images, videos, and documents. OSS can store any amount of data and scale up or down on demand. OSS also supports direct video stream storage capabilities, removing the need for a video segmentation cluster. OSS can be accessed through RESTful APIs, SDKs, or web consoles, and can be integrated with other Alibaba Cloud services such as CDN, ECS, and SLB. OSS provides various storage classes for different data storage scenarios, from hot data storage to cold data storage.For video surveillance data, the Infrequent Access (IA) or Archive storage classes can be used to reduce the storage cost while maintaining high data durability and availability123.Reference:1: Alibaba Cloud Multimedia Solutions | Video Monitoring & Surveillance12: Overview - Object Storage Service - Alibaba Cloud23: OSS Concepts - Alibaba Object Storage Service Course - Cloud Academy

Answer : B, C, D

According to the Alibaba Cloud Academy, Alibaba Cloud OSS is a cloud storage service that features massive capacity, outstanding security, low cost, and high reliability. To control the access to the files stored on OSS, OSS provides multiple access permissions for each bucket. These bucket permissions are:

Public-read-write: Anyone, including anonymous users, can perform read and write operations on the objects in the bucket. The owner of the bucket is charged for the requests and traffic generated by these operations. This permission poses a high security risk and is not recommended.

Public-read: Only the owner of the bucket and authorized RAM users can perform write operations on the objects in the bucket. Anyone, including anonymous users, can perform read operations on the objects in the bucket. The owner of the bucket is charged for the requests and traffic generated by these operations.

Private: Only the owner of the bucket and authorized RAM users can perform read and write operations on the objects in the bucket. Other users, including anonymous users, are denied access to the objects in the bucket unless they have been granted temporary access permissions by the bucket owner or authorized RAM users.

Therefore, the options B, C, and D are the correct answers that describe the bucket permissions in OSS.Reference:OSS Security - Alibaba Object Storage Service Course - Cloud Academy,OSS Concepts - Alibaba Cloud Documentation Center

Answer : B

SQL injection is a common application layer attack that targets the database of a web application. SQL injection exploits a security vulnerability in the application's software, such as incorrect filtering of user input, that allows an attacker to send malicious SQL statements to the database.These statements can then be executed to steal, modify, or delete data, or even execute commands on the server1.SQL injection can also bypass authentication and authorization mechanisms, and sometimes even impersonate or damage the underlying system2.SQL injection is one of the most common and dangerous web attacks, and it can cause serious damage to the confidentiality, integrity, and availability of web applications3.Reference:1:SQL Injection - OWASP2:SQL Injection - Web Application Firewall - Alibaba Cloud Documentation Center3:Web Application Firewall:What is WAF? - Alibaba Cloud.

Answer : A

A company wants to use Alibaba Cloud service to replace their self-built database, which of the following services should it choose?The best answer is ApsaraDB for RDS, which is a stable, reliable, cost-effective, and scalable online database service that supports most mainstream database engines, including MySQL, SQL Server, PostgreSQL, PPAS (highly compatible with Oracle), and MariaDB1.ApsaraDB for RDS is based on the Apsara Distributed File System and high-performance SSDs of Alibaba Cloud, and provides various features such as backup and recovery, performance monitoring, security, and disaster recovery2. By using ApsaraDB for RDS, the company can reduce the complexity and cost of database management, and focus on their core business.

The other options are not suitable for replacing a self-built database. Server Load Balancer (SLB) is a service that distributes traffic among multiple ECS instances according to the configured forwarding rules.It can be used to balance the load and improve the service availability and fault tolerance of applications3. Alibaba Cloud CDN (Content Delivery Network) is a service that delivers content from origin servers to edge nodes, and accelerates the response to user requests.It can be used to improve the user experience and reduce the bandwidth consumption of origin servers4.Deploying more ECS instances is a way to increase the computing resources and scalability of applications, but it does not provide a database service5.Reference:1: What is ApsaraDB RDS?- ApsaraDB RDS - Alibaba Cloud12: ApsaraDB RDS:What is ApsaraDB RDS?- Alibaba Cloud23: Server Load Balancer - Alibaba Cloud Documentation Center34: Alibaba Cloud CDN - Alibaba Cloud45: Elastic Compute Service (ECS) - Alibaba Cloud5