2024年06月18日更新されたACP-Cloud1トレーニング最新認定問題をゲットAlibaba Cloud Computing合格目指せ
認定トレーニングACP-Cloud1試験問題集でテストエンジン
ACP-Cloud1認定試験は、クラウドアーキテクチャ、クラウドセキュリティ、クラウドコンピューティングサービス、クラウド展開モデルなど、幅広いトピックをカバーしています。候補者は、これらの概念を徹底的に理解する必要があります。試験は、複数の選択肢問題から構成され、Alibaba Cloudのテストプラットフォームを通じてオンラインで提供されます。合格した候補者には、Alibaba Cloud ACP-Cloud1認定が授与され、有効期間は2年で、再認証試験に合格することで更新できます。この認定は、雇用主やクライアントに、Alibaba Cloudのプラットフォームを使用してクラウドベースのソリューションを設計および展開するために必要なスキルと知識を保持していることを証明します。
Alibaba CloudのACP-Cloud1（ACP Cloud Computing Professional）認定試験は、クラウドコンピューティング技術と概念に関する個人の知識と理解をテストするために設計されています。この認定試験は、クラウドコンピューティングの専門知識を証明し、クラウドベースのソリューションを設計、展開、管理できる能力を示したい個人を対象としています。試験は、クラウドアーキテクチャ、セキュリティ、ネットワーキング、ストレージ、仮想化を含む様々なトピックをカバーしています。
Alibaba Cloud ACP-Cloud1: ACP Cloud Computing Professional試験は、クラウドコンピューティングに関する知識とスキルを検証する認定試験です。この試験は、クラウドコンピューティングのキャリアを追求することに興味がある専門家や、クラウドコンピューティングに関する専門知識を身に付けたい人々のために設計されています。Alibaba Cloudは世界有数のクラウドサービスプロバイダーの1つであり、この認証は業界で高く評価されています。
質問 # 21
After creating an RDS for MySQL read-only instance, which of the following CAN NOT be performed by the read-only instance in RDS management console?
- A. Specification change
- B. SQL log auditing
- C. Parameter configuration
- D. Intranet/Internet switchover
正解：D
解説：
Explanation
A read-only RDS instance is a replica of the primary RDS instance that can handle read requests and increase the read capability of the database system. A read-only RDS instance inherits the network type (intranet or internet) of the primary RDS instance and cannot switch between them. Therefore, option D is the correct answer. References: Create a read-only ApsaraDB RDS for MySQL instance, Instance types for read-only ApsaraDB RDS instances
質問 # 22
OSS supports multi-part uploading for large files, namely dividing a large file into multiple parts and uploading them in order. This function is suitable for scenarios such as uploading large files or uploading files with poor connectivity.
After completing all the multi-part uploading tasks, if you forget to invoke the "Complete Multipart Upload" interface, there will be fragment files left in OSS, occupying bucket storage space-To facilitate deleting those files, OSS provides the________function.
- A. OpenAPI batch deletion
- B. Bucket clearing
- C. Online batch deletion
- D. Fragment management
正解：C
質問 # 23
Many of Alibaba Cloud services provide highly reliable data storage capacity. For example, Object Storage Service (OSS) promises that its data reliability is no less than 99 99999999%. This high data reliability is solely achieved by RAID 0+1 redundancy technology.
- A. True
- B. False
正解：B
解説：
Explanation
Alibaba Cloud Object Storage Service (OSS) does not solely rely on RAID 0+1 redundancy technology to achieve high data reliability. OSS uses a distributed system architecture to store data across multiple devices and servers. OSS also supports cross-region replication (CRR) to replicate data across different regions for disaster recovery. OSS is designed for 99.9999999999% (12 9's) data durability and 99.995% service availability12. References:
Object Storage Service (OSS) - Alibaba Cloud
What is OSS? - Object Storage Service - Alibaba Cloud Documentation Center
質問 # 24
If you need to accelerate a certain domain name (such as abc.com) via Alibaba Cloud Content Delivery Network (CDN), you must add it to "CDN Domain Name List" in the CDN service. After added successfully, you will get a CNAME address A Next, you need to modify domain name resolution and direct the domain name (such as abc.com) to CNAME address A. Which of the following is a NOT correct description of modifying domain name resolution?
- A. The DNS service provider used by the domain name (such as abc.com) can be companies other than Alibaba Cloud.
- B. If your domain name (such as abc.com) is transferred to Alibaba Cloud in advance, and managed by the same Alibaba Cloud account, you can perform one-step resolution modification.
- C. The CNAME address allocated to the domain name (such as abc.com) will point to an IP address. This IP address resolving mechanism is intelligently managed by Alibaba Cloud CDN system.
- D. The DNS service provider used by the domain name (such as abc.com) must support intelligent resolution.
正解：D
解説：
Explanation
The DNS service provider used by the domain name (such as abc.com) does not need to support intelligent resolution, because the CNAME address allocated to the domain name will point to an IP address that is intelligently managed by Alibaba Cloud CDN system. Therefore, option C is not a correct description of modifying domain name resolution. References: What is Alibaba Cloud CDN? - CDN - Alibaba Cloud Documentation Center and Alibaba Cloud CDN
質問 # 25
Alibaba Cloud Object Storage Service (OSS) provides multiple file uploading modes for different scenarios, which are___________.
(Number of correct answers: 2)
- A. Uploading using the API
- B. Upload using the SDK
- C. Directly copying to/from OSS using portable disks
- D. Direct upload from the OSS management console no matter how large the file is
正解：A、B
解説：
Explanation
Alibaba Cloud Object Storage Service (OSS) is a cloud storage service that allows you to store, retrieve, and manage data in the cloud. OSS provides multiple file uploading modes for different scenarios, such as simple upload, multipart upload, append upload, resumable upload, and cross-region replication. These uploading modes can be implemented by using the API or the SDK provided by OSS. Therefore, options B and D are the correct answers. Option A is not correct because the OSS management console only supports simple upload for files that are smaller than 5 GB. Option C is not correct because OSS does not support directly copying to/from OSS using portable disks. References: Object Storage Service:Simple upload, Object Storage Service:Multipart upload, Object Storage Service:OSS tools
質問 # 26
Many of Alibaba Cloud services provide highly reliable data storage capacity. For example, Object Storage Service (OSS) promises that its data reliability is no less than 99 99999999%. This high data reliability is solely achieved by RAID 0+1 redundancy technology.
- A. True
- B. False
正解：A
質問 # 27
A new media company uses a mobile app to provide news and information services. They utilize Auto Scaling to add/reduce ECS instances dynamically to address service traffic spikes.
Based on the estimation of their service and technical personnel the company thinks they require 10 ECS instances during idle hours and 10 to 20 ECS instances (dynamically adjusted) during some busy hours, which are normally from 07:30 to 09:00 and from 18:30 to 20:00 In the scaling group; they set the "Minimum number of instances" to 10 and "Maximum number of instances" to 20.
To simplify deployment tasks and save costs, which of the following scaling modes should they choose?
- A. Scheduled mode
- B. Healthy mode
- C. Event-triggered mode
- D. Fixed quantity mode
正解：A
解説：
Explanation
According to the Alibaba Cloud Auto Scaling documentation, scheduled mode allows you to configure the scheduled tasks by adding or removing ECS instances for a fixed time. This mode is suitable for scenarios where the service traffic spikes are predictable and periodic. For example, a new media company can use scheduled mode to add or reduce ECS instances dynamically to address service traffic spikes during some busy hours, such as from 07:30 to 09:00 and from 18:30 to 20:00. This mode can help simplify deployment tasks and save costs by avoiding unnecessary scaling activities. References: How Auto Scaling works - Auto Scaling - Alibaba Cloud Documentation Center.
質問 # 28
When creating an ECS instance in your Alibaba Cloud VPC, you must specify a VSwitch for that instance at the same time. Otherwise, you will not be able to create this ECS instance.
- A. True
- B. False
正解：A
質問 # 29
A company launched its online service just a year ago. It uses five ECS instances and does not have a full-time system administrator Over the last six months, the company's system has encountered various security problems Several high-risk vulnerabilities were exploited by hackers, leading to leakage of the company's confidential dat a. Which of the following Alibaba Cloud products can be used to quickly resolve this problem?
- A. Security Center
- B. Cloud Firewall
- C. Managed Security Service
- D. Anti-DDoS Pro Service
正解：B
質問 # 30
When using Alibaba Cloud SLB, users can enable the health check function If a backend ECS instance A is running abnormally, SLB will isolate it and forward the requests to other ECS instances, and when the backend ECS instance A is back to normal, SLB will again forward requests to it.
- A. True
- B. False
正解：A
質問 # 31
A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that
1. Must support secured remote O&M because the administrator often takes business trips.
2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)
- A. Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.
- B. Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace).
The administrator uses VPN encrypted communication during O&M. - C. Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.
- D. Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.
正解：A、B、D
解説：
Explanation
To meet the company's security requirements, the following solutions should be used together:
A: Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace).
The administrator uses VPN encrypted communication during O&M. This solution can support secure remote O&M, because VPN (Virtual Private Network) is a technology that creates a secure and encrypted connection over the Internet between the bastion host and the administrator's device. VPN can protect the data transmitted between the bastion host and the administrator from being intercepted or tampered by malicious third parties1. Alibaba Cloud provides VPN Gateway service that allows users to create VPN connections between VPCs and on-premises data centers, or between VPCs in different regions2. Users can also use VPN images from Alibaba Cloud Marketplace, such as OpenVPN, to create VPN servers on ECS instances3.
B: Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems. This solution can also support secure remote O&M, because a bastion host is a special-purpose ECS instance that acts as a proxy or a gateway for accessing other ECS instances in the VPC. A bastion host can enhance the security of the ECS instances by limiting the exposure of the ECS instances to the public network, and by implementing security policies and monitoring tools on the bastion host4. Alibaba Cloud provides Bastionhost service that allows users to centrally manage the access to cloud servers from external networks and provide secure connections to VPC resources5.
C: Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups. This solution can isolate the networks between subsystems, because a security group is a virtual firewall that controls the inbound and outbound traffic of the ECS instances in the group. Users can configure security group rules to allow or deny access based on the network protocol, port, and source IP address. By deploying ECS instances running different subsystems to independent security groups, users can prevent unauthorized access or communication between the subsystems6.
The other solution is not suitable for the company's scenario, for the following reason:
D: Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups. This solution cannot isolate the networks between subsystems, because ECS instances in the same security group can communicate with each other by default, regardless of whether they have intranet or internet IP addresses. Moreover, this solution may also prevent the ECS instances from accessing the internet or providing external services, which may affect the business operation of the company6.
References: What is a VPN? - Virtual Private Network - Cisco, VPN Gateway - Alibaba Cloud, OpenVPN - Alibaba Cloud Marketplace, Bastion Host - Alibaba Cloud Document Center, Bastionhost - Alibaba Cloud, Security groups - Elastic Compute Service - Alibaba Cloud
質問 # 32
Different Alibaba Cloud VPCs are completely isolated from each other.
By default, the VPCs cannot communicate with each other over Intranet, but you can establish VPN connections via the Internet to achieve interconnection between VPCs.
- A. True
- B. False
正解：B
解説：
Explanation
Different Alibaba Cloud VPCs are completely isolated from each other by default, but they can communicate with each other over the intranet by using different methods, such as Cloud Enterprise Network (CEN), VPN gateways, VPC peering connections, and PrivateLink. These methods allow you to establish secure and reliable connections between VPCs without exposing your network traffic to the internet. References:
Overview of VPC connections - Alibaba Cloud
Cross-VPC peering - Alibaba Cloud
ALIYUN::VPC::VpcPeerConnection - Alibaba Cloud
質問 # 33
Alibaba Cloud SLB can distribute user requests to backend ECS instances. These ECS instances must have the same specification (CPU, Memory)
- A. True
- B. False
正解：A
質問 # 34
When a customer uses Alibaba Cloud Object Storage Service (OSS) service and finds there exist an amount of Internet downstream traffic, he/she can use Alibaba Cloud Content Delivery Network (CDN) service to reduce the traffic cost.
Because the Internet traffic cost of CDN is lower than that of OSS, moreover, the back-to-source traffic cost from CDN to OSS is also lower than a user access to OSS directly.
- A. True
- B. False
正解：A
質問 # 35
You are using Auto Scaling with one scaling group already created, then you want to execute a task at a specific time such as removing 1 ECS instance every night at 00:00. To achieve this, which of the following operations should be performed'? (Number of correct answers; 2)
- A. Create a new scaling group.
- B. Create a scaling rule
- C. Create a scheduled task.
- D. Create an event-triggered task.
正解：B、C
解説：
Explanation
To execute a task at a specific time such as removing 1 ECS instance every night at 00:00, you need to perform two operations: create a scaling rule and create a scheduled task. A scaling rule is a set of instructions that defines how Auto Scaling scales computing resources in response to changes in business load. A scheduled task is a type of scaling task that can execute a specified scaling rule at a specified time. By creating a scaling rule that removes 1 ECS instance from the scaling group, and creating a scheduled task that executes this scaling rule every night at 00:00, you can achieve the desired result. You do not need to create a new scaling group, because you already have one scaling group created. You also do not need to create an event-triggered task, because this type of scaling task is triggered by events such as Cloud Monitor alarms or API calls, not by a specific time. References: 1, 2, and 3.
質問 # 36
A startup video streaming company deploys its service on Alibaba Cloud Elastic Compute Service (ECS) Christmas is coming soon and the CEO knows that they need to prepare more computing resources However, they don't want to purchase a large number of Elastic Compute Service (ECS) instances tor a long period of time. Instead, they want to buy ECS instances for a short period of time and release them after the event is over. Which of the following billing methods of ECS is the most suitable?
- A. Subscription with Reserved Instances
- B. Pay-As-You-Go with Savings Plan
- C. Pay-As-You-Go Only
- D. Pay-As-You-Go with Reserved Instances
正解：C
解説：
Explanation
Pay-As-You-Go is a billing method that allows you to pay for resources after you use them. You are billed based on the actual usage of resources, such as the number of hours that an ECS instance runs or the amount of data that is transferred. Pay-As-You-Go is suitable for scenarios where the demand for resources is unpredictable, flexible, or short-term1. Pay-As-You-Go has the following advantages for the startup video streaming company:
No upfront payment: The company does not need to pay any fees in advance when they purchase ECS instances. They only pay for the resources that they actually use, which can help them save costs and optimize their cash flow1.
Flexible scaling: The company can easily scale up or down their ECS instances based on the actual demand for their service. They can add more ECS instances during peak hours or events, such as Christmas, and release them when the demand drops. They can also change the configurations of their ECS instances at any time, such as upgrading the CPU, memory, or bandwidth1.
No long-term commitment: The company does not need to commit to a long-term contract or subscription when they use Pay-As-You-Go. They can release their ECS instances at any time without incurring any penalties or fees. They can also switch to other billing methods, such as Subscription or Savings Plan, if their business needs change1.
The other billing methods of ECS are not as suitable as Pay-As-You-Go for the company's scenario, for the following reasons:
Pay-As-You-Go with Reserved Instances: Reserved Instances are a type of discount coupon that can be used to deduct a portion of the fees incurred by Pay-As-You-Go instances that match the attributes of the Reserved Instances, such as region, zone, instance type, and operating system2. Reserved Instances require upfront payment and have a fixed term of one year or three years. They are suitable for scenarios where the demand for resources is stable and predictable, and where the user wants to enjoy lower prices than Pay-As-You-Go2. However, for the company's scenario, Reserved Instances are not a good option, because they do not need to purchase a large number of ECS instances for a long period of time, and they want to have more flexibility and scalability in their resource management.
Subscription with Reserved Instances: Subscription is a billing method that allows you to pay for resources in advance for a specific period of time, such as one month, one year, or three years. You are billed based on the specifications and duration of the resources that you purchase, regardless of whether you use them or not. Subscription is suitable for scenarios where the demand for resources is stable and long-term, and where the user wants to enjoy lower prices than Pay-As-You-Go3. Subscription with Reserved Instances can further reduce the cost of Subscription instances by applying the Reserved Instances discounts to them2. However, for the company's scenario, Subscription with Reserved Instances are not a good option, because they do not want to pay for resources in advance or commit to a long-term contract, and they want to have more flexibility and scalability in their resource management.
Pay-As-You-Go with Savings Plan: Savings Plan is a billing method that allows you to commit to a consistent amount of usage (measured in USD/hour) for a one-year or three-year term, and in exchange, receive a lower price for that usage4. Savings Plan can be applied to any Pay-As-You-Go instances that match the attributes of the Savings Plan, such as region, instance family, or operating system4. Savings Plan is suitable for scenarios where the demand for resources is stable and predictable, and where the user wants to enjoy lower prices than Pay-As-You-Go and more flexibility than Subscription4.
However, for the company's scenario, Savings Plan is not a good option, because they do not want to commit to a consistent amount of usage for a long period of time, and they want to have more flexibility and scalability in their resource management.
References: Pay-As-You-Go - Elastic Compute Service - Alibaba Cloud, Reserved Instances - Elastic Compute Service - Alibaba Cloud, Subscription - Elastic Compute Service - Alibaba Cloud, Savings Plan - Elastic Compute Service - Alibaba Cloud
質問 # 37
A Virtual Private Cloud (VPC) is an isolated network environment that is completely isolated from each other The following statements about VPC are correct_________. (Number of correct answers: 2)
- A. Each VPC has an independent tunnel ID, and a tunnel ID corresponds to a virtualized network.
- B. The internal networks of different VPCs are completely isolated and can be interconnected through IP addresses mapped to the outside.
- C. Subnets can be divided like the traditional network environment. Different cloud servers within each subnet are connected by the same router and different subnets are interconnected by switches.
- D. ECS instances in a VPC use security group firewalls for Layer 2 network access control.
正解：A、B
解説：
Explanation
According to the Alibaba Cloud Academy, a VPC is an isolated network environment that is completely isolated from each other. Each VPC has an independent tunnel ID, and a tunnel ID corresponds to a virtualized network. This means that different VPCs cannot communicate with each other through the tunnel ID. Subnets are not divided like the traditional network environment, but rather are logical divisions of the VPC. Different cloud servers within each subnet are connected by the same router, but different subnets are interconnected by route tables, not switches. ECS instances in a VPC use security group firewalls for Layer 4 network access control, not Layer 2. The internal networks of different VPCs are completely isolated and can be interconnected through IP addresses mapped to the outside, such as NAT Gateway or EIP. References: ACP Cloud Computing Certification Preparation Course - Internetworking with VPC, Alibaba Cloud VPC User Guide
質問 # 38
By using ApsaraDB for RDS to implement read/write splitting, which of the following can be achieved? (Number of correct answers 2)
- A. Read/write requests to the database are separated.
- B. Write requests are distributed to multiple instances.
- C. Both read and write requests are distributed to multiple instance
- D. Read requests are distributed to multiple instances.
正解：B、C
質問 # 39
......
合格を確定するガイドでACP-Cloud1試験準備しよう：https://www.goshiken.com/Alibaba-Cloud/ACP-Cloud1-mondaishu.html
Alibaba Cloud Computing ACP-Cloud1無料最新のリアル試験問題と回答：https://drive.google.com/open?id=1yuEE4f-9vbqIguiXMXbYFWrjt4_6MnJr