Alibaba ACA Cloud Computing Associate ACA-Cloud1 Exam Questions

Answer : B

A snapshot is a copy of data on a disk at a certain point in time. It is used to back up and restore data, or create custom images.Snapshots can capture the data of system disks, data disks, and shared block storage devices1.

Answer : C

The issue that Company B faces is that their music files stored in OSS are being downloaded by unauthorized users who access them through search engines, rather than through their website. This is called leeching, which is a form of bandwidth theft that consumes the OSS traffic and increases the cost for Company B. To address this issue, Company B can limit the access sources by configuring the ''Anti-leech settings'' of OSS bucket attributes. Anti-leech settings allow the bucket owner to specify a referer whitelist, which is a list of domain names that are allowed to access the OSS resources. The referer is a part of the HTTP header that indicates the source URL of the request. By setting a referer whitelist, Company B can prevent leeches from accessing their music files directly from search engines or other websites, and only allow access from their own website domain name. This way, Company B can protect their OSS resources from unauthorized access and reduce their OSS traffic costs. The other options are not effective or relevant for addressing the issue. Migrating music files from OSS to data disks for ECS instances would increase the storage and computing costs for Company B, and also reduce the scalability and availability of their music files. Changing the website access mode to HTTPS would enhance the security and encryption of the website, but it would not prevent leeches from accessing the OSS resources through search engines. Introducing SLB for extra protection would improve the load balancing and high availability of the ECS instances, but it would not affect the access control of the OSS resources.Reference:OSS Anti-Leech Referer Configuration and Error Elimination

Answer : A, B, C

When using Alibaba Cloud OSS, you can set access control in three different levels, which are bucket level, object level, and RAM account level. Bucket level access control is the highest level of access control, which determines whether a user can access the bucket and its objects. Bucket level access control can be set to public read/write, public read, or private. Object level access control is the second level of access control, which determines whether a user can access a specific object in the bucket. Object level access control can be set to inherit from the bucket, public read/write, public read, or private. RAM account level access control is the lowest level of access control, which determines whether a user can perform certain operations on the bucket or the object. RAM account level access control can be set by using RAM policies, which specify the actions, resources, and conditions for the access.Reference:Object Storage Service (OSS) - Alibaba Cloud Academy,Access Control - Alibaba Cloud Documentation Center

Answer : A

Alibaba Cloud China Connect is a service that can help international companies do business in China by providing them with the necessary infrastructure, compliance, and ecosystem support1.China Connect includes the following services1:

ICP Support: Alibaba Cloud helps you obtain the Internet Content Provider (ICP) license, which is required for any website hosted in mainland China.

Office registration support: Alibaba Cloud helps you register a legal entity in mainland China, which is required for some business scenarios such as e-commerce, online payment, and social media.

Connect your service with Alibaba Group ecosystem: Alibaba Cloud helps you leverage the Alibaba Group ecosystem, which includes platforms such as Taobao, Tmall, Alipay, and DingTalk, to reach millions of potential customers and partners in China.

However, China Connect does not include web hosting, which is a service that allows you to store and deliver your website content on Alibaba Cloud servers. Web hosting is a separate service that you can purchase from Alibaba Cloud, and it is not part of China Connect.

Answer : A, B, C

Alibaba Cloud relational database service (RDS) is a stable, reliable and elastic online database service that supports various database engines, such as MySQL, SQL Server, PostgreSQL, MariaDB, and PPAS (PostgreSQL with Oracle compatibility)1. RDS provides high availability, backup and recovery, security, and monitoring features for your databases.RDS does not support Oracle database, which is a proprietary database system developed by Oracle Corporation2.If you need to use Oracle database on Alibaba Cloud, you can deploy it on an ECS instance or use the Oracle Database Backup Service3.

Answer : A, B, C

Alibaba Cloud Server Load Balancer (SLB) is a service that distributes network traffic across multiple ECS instances to improve the service capabilities of applications. SLB supports the following protocols for the listener configuration:

HTTP: Hypertext Transfer Protocol, a stateless application-layer protocol that is used to transfer web pages and other resources over the internet.

HTTPS: Hypertext Transfer Protocol Secure, an extension of HTTP that uses SSL/TLS encryption to provide secure communication between the client and the server.

TCP: Transmission Control Protocol, a reliable, connection-oriented transport-layer protocol that provides reliable data delivery and error recovery.

UDP: User Datagram Protocol, a connectionless transport-layer protocol that provides fast and efficient data transmission without guaranteeing reliability or order.

SLB does not support the following protocols:

MPLS: Multiprotocol Label Switching, a data-carrying technique that uses labels to forward packets across a network.

MQTT: Message Queuing Telemetry Transport, a lightweight publish/subscribe messaging protocol that is designed for constrained devices and low-bandwidth networks.

Alibaba Cloud Server Load Balancer

ACA Cloud Computing Certification Exam Preparation Course

Alibaba Cloud Computing Exam Question 2022

Answer : A

A is the correct answer because RDS provides whitelist access policies that allow you to set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning. A whitelist is a security feature that specifies the IP addresses or CIDR blocks that are allowed to access your RDS instance. By default, the whitelist is empty, which means that no IP address can access your RDS instance. You can add IP addresses or CIDR blocks to the whitelist according to your business needs. You can also create multiple whitelist groups and assign different IP addresses or CIDR blocks to each group.This can help you manage the access permissions of different users or applications12