Free Alibaba ACA Cloud Computing Associate ACA-Cloud1 Exam Questions

Server Guard is a cloud-based security service that provides real-time protection for servers against intrusion events, such as brute force password cracking. Server Guard consists of a lightweight agent that is installed on the server and a cloud protection center that analyzes and responds to security threats.Server Guard can help the administrator to reduce the possibility of brute force password cracking by providing the following features1:

Password cracking protection: Server Guard can detect and block password cracking attempts on servers, such as SSH brute force attacks on Linux servers and RDP brute force attacks on Windows servers. Server Guard can also alert the administrator of the attack source, time, and frequency, and provide suggestions for password strengthening.

Webshell detection and removal: Server Guard can scan and remove webshells that are maliciously implanted on servers by hackers. Webshells are scripts that allow hackers to remotely execute commands on servers, such as stealing data, uploading files, or launching attacks. Server Guard can identify and delete webshells based on signature matching, behavior analysis, and machine learning.

Anti-virus and anti-ransomware: Server Guard can detect and terminate various types of malware, such as ransomware, mining programs, backdoor programs, worms, and trojans. Server Guard can also prevent the encryption and deletion of files by ransomware, and restore the files to their original state.

Security baseline check: Server Guard can perform security baseline checks on servers to evaluate their security posture and compliance level. Server Guard can check more than 40 security items, such as system configuration, account management, network security, and log audit. Server Guard can also provide security hardening suggestions and one-click fixes for the detected issues.

Security situation awareness: Server Guard can provide a comprehensive and visualized view of the security situation of the servers, such as the number of attacks, the attack sources, the attack types, the attack trends, and the security score. Server Guard can also provide security reports and recommendations for improving the security level of the servers.Reference:Security Center

D is the correct answer because OSS supports 3 internal data copies, no human intervention is required to recover the data when anything goes wrong. OSS provides high data reliability and durability by storing multiple replicas of data on different devices in the same region. OSS automatically detects and repairs data errors or failures, and ensures data consistency across all replicas.OSS also supports cross-region replication (CRR) to back up data to another region for disaster recovery12

A, B, and C are incorrect answers because they do not reflect the actual backup technology and policies of OSS.

A is incorrect because OSS does not require manual recovery of data, as it automatically handles data errors or failures.

B is incorrect because OSS provides data protection and backup for customers, and customers do not need to safeguard their own data or use offsite backups.

C is incorrect because OSS does not use RAID0+1 configuration of its underlying physical hard disks, but rather uses a distributed storage system that stores multiple replicas of data on different devices.

RDS (Relational Database Service) is a fully managed online database service that supports various database engines, such as MySQL, SQL Server, PostgreSQL, MariaDB, and PPAS (PostgreSQL with Oracle compatibility)1.However, RDS does not support Oracle database, which is a proprietary database system developed by Oracle Corporation2.If you need to use Oracle database on Alibaba Cloud, you can deploy it on an ECS instance or use the Oracle Database Backup Service3.

When using Alibaba Cloud OSS, you can set access control in three different levels, which are bucket level, object level, and RAM account level. Bucket level access control is the highest level of access control, which determines whether a user can access the bucket and its objects. Bucket level access control can be set to public read/write, public read, or private. Object level access control is the second level of access control, which determines whether a user can access a specific object in the bucket. Object level access control can be set to inherit from the bucket, public read/write, public read, or private. RAM account level access control is the lowest level of access control, which determines whether a user can perform certain operations on the bucket or the object. RAM account level access control can be set by using RAM policies, which specify the actions, resources, and conditions for the access.Reference:Object Storage Service (OSS) - Alibaba Cloud Academy,Access Control - Alibaba Cloud Documentation Center

Your website has oscillating traffic peaks that are difficult to predict in advance. In this scenario, it is recommended to use SLB and Auto Scaling together with ECS. SLB is a service that distributes traffic among multiple ECS instances according to the configured forwarding rules. It can be used to balance the load and improve the service availability and fault tolerance of applications. Auto Scaling is a service that automatically adjusts computing resources based on your volume of user requests. When the demand for computing resources increases, Auto Scaling automatically adds ECS instances to serve additional user requests, or alternatively removes instances in the case of decreased user requests.By using SLB and Auto Scaling together with ECS, you can achieve high scalability and elasticity for your website, and cope with the changing traffic patterns12.Reference:1: ACA Cloud Computing Exam Preparation Course - Alibaba Cloud32: Auto Scaling: Automatically Adjusts Computing Resources - Alibaba Cloud4

Domain name binding is a feature that allows you to use your own domain name to access your OSS bucket, instead of using the default OSS domain name.Domain name binding has the following requirements and limitations12:

Your customized domain name will be audited by Alibaba Cloud. You need to submit a domain name binding request and wait for approval before you can use your own domain name to access your OSS bucket.

Your customized domain name need to be put on record in MIIT (Ministry of Industry and Information Technology). This is a mandatory requirement for all websites that are hosted in mainland China. You need to provide your domain name information and relevant documents to MIIT and obtain an ICP filing number before you can use your own domain name to access your OSS bucket.

ApsaraDB RDS for MySQL is a cloud-based relational database service that provides secure, cost-effective, and scalable database solutions for various applications. RDS for MySQL supports creating read-only instances that are synchronized with the primary instance in real time. Read-only instances can handle read requests from applications and reduce the read pressure on the primary instance. This can improve the performance and availability of the database system. Read-only instances can also be used for scenarios such as report analysis, data backup, and disaster recovery.

Overview of read-only ApsaraDB RDS for MySQL instances

ACA Cloud Computing Certification Exam Preparation Course

Alibaba Cloud Computing Exam Question 2022

Alibaba Cloud China Connect is a service that can help international companies do business in China by providing them with the necessary infrastructure, compliance, and ecosystem support1.China Connect includes the following services1:

ICP Support: Alibaba Cloud helps you obtain the Internet Content Provider (ICP) license, which is required for any website hosted in mainland China.

Office registration support: Alibaba Cloud helps you register a legal entity in mainland China, which is required for some business scenarios such as e-commerce, online payment, and social media.

Connect your service with Alibaba Group ecosystem: Alibaba Cloud helps you leverage the Alibaba Group ecosystem, which includes platforms such as Taobao, Tmall, Alipay, and DingTalk, to reach millions of potential customers and partners in China.

However, China Connect does not include web hosting, which is a service that allows you to store and deliver your website content on Alibaba Cloud servers. Web hosting is a separate service that you can purchase from Alibaba Cloud, and it is not part of China Connect.

A is the correct answer because RDS provides whitelist access policies that allow you to set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning. A whitelist is a security feature that specifies the IP addresses or CIDR blocks that are allowed to access your RDS instance. By default, the whitelist is empty, which means that no IP address can access your RDS instance. You can add IP addresses or CIDR blocks to the whitelist according to your business needs. You can also create multiple whitelist groups and assign different IP addresses or CIDR blocks to each group.This can help you manage the access permissions of different users or applications12

Server Load Balancer (SLB) is a service that distributes network traffic across multiple ECS instances to improve the service capabilities of applications. By using SLB, you can increase the availability and fault tolerance of your applications. You can also use SLB with Auto Scaling to dynamically adjust the number of ECS instances based on the traffic load. Multiple lower-configuration I/O-optimized ECS instances can be used with SLB to deliver a high-availability architecture that can handle traffic spikes and reduce costs.

Alibaba Cloud Server Load Balancer

Alibaba Cloud Elastic Compute Service

ACA Cloud Computing Certification Exam Preparation Course