ACP-Cloud1 Alibaba Cloud ACP Cloud Computing Certification Free Practice Exam Questions (2025 Updated)

For large-scale DDoS attacks exceeding 10 Gbps, Alibaba Cloud’s Anti-DDoS Pro or Anti-DDoS Premium is recommended. These services provide advanced DDoS protection, ensuring high service availability during attacks by mitigating traffic before it reaches the server. Anti-DDoS Origin Basic Edition would not suffice for attacks at this volume.

For optimal use of SLB with Auto Scaling, enabling Health Check is essential to determine which instances are healthy and ready to handle traffic. SLB doesn’t require all backend servers to have the same OS, be in the same scaling group, or have identical configurations, as it can manage heterogeneous server setups within the same load-balancing group.

=================

Alibaba Cloud OSS provides three primary access permissions for buckets: Private, Public-read, and Public-read-write.

Private: Only the owner has access to read or write data.

Public-read: The owner can read and write, but others can only read.

Public-read-write: The bucket is fully open for reading and writing by all users.There is no Private-read permission in OSS access control options, so option A is incorrect.

The DNS service provider used by the domain name (such as abc.com) does not need to support intelligent resolution, because the CNAME address allocated to the domain name will point to an IP address that is intelligently managed by Alibaba Cloud CDN system. Therefore, option C is not a correct description of modifying domain name resolution. References: What is Alibaba Cloud CDN? - CDN - Alibaba Cloud Documentation Center and Alibaba Cloud CDN

Alibaba Cloud OSS (Object Storage Service) is designed for storing large volumes of unstructured data, such as files, images, and videos, making it an optimal solution for network disk applications. By migrating storage from ECS data disks to OSS, the team can offload storage tasks, reduce the number of ECS instances required, and significantly lower O&M costs. OSS also provides high scalability, reliability, and cost-effectiveness for such use cases.

After stopping an Alibaba Cloud Elastic Compute Service (ECS) instance, you will not be charged for the instance usage fee or the public bandwidth fee (if applicable) until you start the instance again. However, you will still be charged for the disk usage fee and the snapshot usage fee (if applicable) regardless of which region the instance is located in. This is because the disks and snapshots are still occupying the storage space and need to be billed accordingly. Therefore, the statement is false. References: 1 - Billing FAQ - Alibaba Cloud Document Center - What fees do I need to pay after I stop a Pay-As-You-Go instance?

By default, ECS instances in different zones within the same region are not interconnected via the Intranet. To enable communication between instances across zones, you would need to configure a VPC or use other network configurations. This setup provides isolation and flexibility in managing network traffic within different zones.

Alibaba Cloud provides two main products for Anti-DDoS protection: Anti-DDoS Origin Service, which protects against attacks at the origin server level, and Anti-DDoS Pro Service, which offers advanced DDoS mitigation for applications hosted on Alibaba Cloud. Security Center and Cloud Firewall offer different security functionalities but do not provide direct Anti-DDoS services.

=================

Auto Scaling in Alibaba Cloud supports both Pay-As-You-Go and monthly subscription ECS instances within a scaling group. Pay-As-You-Go instances provide flexibility during traffic surges, while idle monthly subscription instances can be added manually to optimize costs and resource usage.

=================

A. Management and maintenance: To prevent emergent service termination, users need to know the underlying detail like how the data is archived in the resource pool. This is incorrect because cloud storage is designed to abstract the underlying details of how the data is stored and managed from the users. Users do not need to worry about the hardware, software, or network issues that may affect the data availability or reliability. The cloud storage provider is responsible for maintaining and managing the storage infrastructure and ensuring the service continuity1.

B. Service on demand Cloud storage has a huge resources pool, users can apply for and use the resources on demand. This is correct because cloud storage is based on the cloud computing model of service on demand, which means that users can request and access the storage resources as needed, without having to purchase or provision them in advance. Cloud storage providers offer flexible pricing models that allow users to pay only for the storage they use2.

C. High reliability and availability: Provides very high reliability and availability through technologies like 3 redundant copies, automatic failure recovery, etc. This is correct because cloud storage uses various technologies and methods to ensure that the data stored in the cloud is always accessible and durable. For example, cloud storage providers typically replicate the data across multiple servers, regions, or zones to prevent data loss due to hardware failure, natural disaster, or human error. Cloud storage providers also use automatic failure recovery mechanisms to detect and repair any issues that may affect the data integrity or availability3.

D. Ultra-large scale: Data storage can reach TB or even PB level. This is correct because cloud storage can handle massive amounts of data, ranging from terabytes (TB) to petabytes (PB) or even exabytes (EB). Cloud storage providers have the infrastructure and expertise to scale up the storage capacity and performance to meet the growing data needs of users. Cloud storage can support various types of data, such as structured, unstructured, or semi-structured data, and various use cases, such as data backup, data archiving, data analytics, or data sharing.

E. Transparent service: Provides the service through a single SDK. This is incorrect because cloud storage is not a transparent service, but a service that requires users to interact with it through a specific interface or protocol. Cloud storage providers usually offer different types of storage services, such as object storage, block storage, or file storage, each with its own characteristics and features. Users need to choose the appropriate storage service for their data and use the corresponding software development kit (SDK), application programming interface (API), or command-line interface (CLI) to access and manipulate the data.

F. High scalability Storage capacity can be dynamically scaled to meet the needs. This is correct because cloud storage is highly scalable, meaning that users can increase or decrease the storage capacity according to their data needs. Cloud storage providers offer elastic storage services that can automatically adjust the storage resources based on the demand, without requiring users to manually provision or deprovision them. Cloud storage also allows users to scale the storage performance, such as throughput, latency, or bandwidth, to optimize the data access and transfer.

References: 1: What is Cloud Storage? - Cloud Storage Explained - AWS 2: What is Cloud Storage & How Does it Work? | Google Cloud 3: Cloud Storage Reliability and Availability | Cloud Storage Documentation : What is Cloud Storage? - Definition from Techopedia : Cloud Storage Types: Object, Block, and File | IBM : Cloud Storage Scalability | Cloud Storage Documentation

When using Alibaba Cloud SLB to forward layer 7 (HTTP) service requests, SLB will replace the IP address in the HTTP header file to forward requests. Therefore, the source IP address that can be seen on the backend ECS instance is the IP address of SLB instead of the client’s real IP address. However, SLB also provides a feature called X-Forwarded-For (XFF) that can help you obtain the real IP address of the client. XFF is a standard HTTP header field that records the original IP address of the client and the proxy servers that the request passes through. You can enable XFF on the SLB console or by using the API, and then configure your backend ECS instance to parse the XFF header field and get the real IP address of the client. References: 1 - SLB overview - Alibaba Cloud Document Center - Layer 7 listeners - X-Forwarded-For

According to the Alibaba Cloud ECS documentation1, the recommended instance type for Tomcat is ecs.c5.xlarge, which has 4 vCPUs and 4 GiB of memory. This instance type is suitable for web applications that require high performance and low latency. The recommended instance type for Memcache is ecs.r5.large, which has 2 vCPUs and 16 GiB of memory. This instance type is optimized for memory-intensive applications that require high memory bandwidth and low latency. Therefore, option D is the most recommended configuration for deploying Tomcat and Memcache on two ECS instances. References: Instance type families and Alibaba Cloud Elastic Compute Service Product Introduction

In Alibaba Cloud SLB, Layer-7 (HTTP/HTTPS) services require enabling the "X-Forwarded-For" header to retrieve the real IP address of clients, while Layer-4 (TCP/UDP) services can obtain the real IP address directly without additional settings.

=================

Elastic Computing on Alibaba Cloud ECS includes features that allow users to quickly start or release multiple instances, upgrade bandwidth without downtime, adjust CPU and memory configurations, and perform horizontal scaling in conjunction with Server Load Balancer (SLB). However, option E is incorrect as there is a limit to the number of disks that can be attached to an ECS instance.

RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning1. A whitelist is a list of IP addresses or CIDR blocks that are allowed to access an RDS instance. By default, the whitelist is empty, which means that no IP address can access the RDS instance. You can add IP addresses or CIDR blocks to the whitelist to allow access from specific sources. You can also modify or delete the whitelist as needed2. Whitelist access policies help improve the security of your RDS instance and protect your data from unauthorized access3. 

Alibaba Cloud provides basic security services for ECS instances, which include protection against unexpected remote logins, DDoS attacks, brute-force password cracking, and alerts for potential sensitive information leakage. Key management services (KMS) are available but are not part of the free security services for ECS.

Option B is correct because using Server Load Balancer (SLB) and adding additional ECS instances can help to distribute the traffic among multiple servers and improve the availability and scalability of the platform. SLB can also provide health checks and fault tolerance for the ECS instances1

Option D is correct because replacing the self-built MySQL database with ApsaraDB for RDS can provide better database performance, security, and reliability. ApsaraDB for RDS is a fully managed cloud database service that supports MySQL, SQL Server, PostgreSQL, and other engines. It can automatically handle tasks such as backup, recovery, monitoring, and patching. Using RDS read-only instances can also handle read-only requests and reduce the load on the primary database2

Option A is incorrect because importing database data into Object Storage Service (OSS) will not share the storage pressure on the platform. OSS is a cloud storage service that provides high durability, availability, and scalability for storing unstructured data such as images, videos, and documents. It is not suitable for storing structured data such as database tables. Moreover, importing data into OSS will incur additional costs and latency3

Option C is incorrect because using Content Delivery Network (CDN) will not enhance the content loading speed of the platform. CDN is a distributed network that delivers content to users based on their geographic locations, the origin of the content, and the content delivery server. It is mainly used to accelerate the delivery of static content such as images, videos, and scripts. It is not effective for dynamic content such as database queries and transactions4

References:

1: Server Load Balancer - Alibaba Cloud

2: ApsaraDB for RDS - Alibaba Cloud

3: Object Storage Service - Alibaba Cloud

4: Content Delivery Network - Alibaba Cloud

 Cloud Firewall is a service that provides centralized protection for your cloud assets and prevents unauthorized access to your servers. Cloud Firewall can monitor and control the inbound and outbound traffic of your servers, and block malicious requests and attacks. Cloud Firewall can also detect and prevent brute force password cracking attempts by using intelligent algorithms and threat intelligence. Therefore, option A is the correct answer. References: What is Cloud Firewall?, Protect servers from brute force attacks

Once a VPC is created in Alibaba Cloud, its CIDR Block cannot be modified. This design ensures stability and network consistency within the VPC. To change the network range, a new VPC would need to be created with the desired CIDR Block.

=================