[Mar 13, 2024] Real4Prep ACP-Cloud1 Exam Practice Test Questions (Updated 72 Questions)
Pass Alibaba Cloud ACP-Cloud1 Exam Info and Free Practice Test
Achieving the ACP-Cloud1 certification demonstrates that an individual has the skills and knowledge needed to effectively utilize Alibaba Cloud services in a variety of settings. ACP Cloud Computing Professional certification can help professionals enhance their career prospects, showcase their expertise to potential employers, and stay up-to-date with the latest developments in cloud computing.
Alibaba Cloud ACP-Cloud1 exam is a vendor-neutral certification that is recognized globally. It is an ideal certification for IT professionals who work with Alibaba Cloud or plan to use Alibaba Cloud for their organization's cloud computing needs. ACP Cloud Computing Professional certification is also suitable for individuals who want to enhance their knowledge and skills in cloud computing.
NEW QUESTION # 21
Auto Scaling can automatically adjust the number of ECS instances based on user-defined scaling rules to meet service needs. If a user cannot predict service changes or does not have enough history data, he/she can still use dynamic scaling mode to automatically add/remove ECS instances based on certain CloudMonitor performance metrics (such as the CPU utilization rate)
- A. False
- B. True
Answer: B
NEW QUESTION # 22
Which of the following privilege is required to manually install Alibaba Clod Security Center on the server?
- A. FTP service privilege
- B. Database Access privilege
- C. System administrator privilege
- D. Common user privilege
Answer: C
Explanation:
Explanation
To manually install Alibaba Cloud Security Center on the server, you need to have the system administrator privilege. This is because the Security Center agent requires access to the system files and processes, and can perform security operations such as vulnerability scanning, intrusion detection, and threat blocking. A common user privilege or a database access privilege is not sufficient to install the Security Center agent. An FTP service privilege is irrelevant to the installation process.
NEW QUESTION # 23
You have created two Alibaba Cloud VPCs in two different regions To establish communication between these two VPCs via the Intranet, you can________.
- A. Use the VRouter to create a new route table to enable the communication
- B. Create a new access rule through the Security Group to enable the communication
- C. Use CEN to establish communication between VPCs
- D. No operation is needed, as VPCs under the same account are connected through the Intranet by default
Answer: C
Explanation:
Explanation
CEN is a service that allows you to create a global network for rapidly building a distributed business system with a hybrid cloud computing solution. CEN enables you to build a secure, private, and enterprise-class interconnected network between VPCs in different regions and your local data centers1. CEN uses transit routers deployed in different regions to build a full-mesh network on top of the Alibaba Cloud global transmission network. CEN enables global network communication: The two transit routers can be connected through multiple highly available and highly reliable lines2. To establish communication between two VPCs in different regions via the intranet, you can use CEN to attach the VPCs to the transit routers in their respective regions, and then create a bandwidth plan to allocate bandwidth resources for inter-region connections3. This way, you can avoid the complexity and cost of setting up VPN or Express Connect connections between the VPCs, and enjoy the benefits of CEN, such as large-scale and on-demand networking, simplified network topology, flexible management, globally connected network, shortest-path algorithm, high redundancy, automatic route learning and advertisement, and bandwidth sharing and management2. References: Introduce Cloud Enterprise Network CEN and how ... - Alibaba Cloud Academy, Cloud Enterprise Network (CEN) - Alibaba Cloud, Attach a network instance to a CEN instance - Cloud Enterprise Network - Alibaba Cloud
NEW QUESTION # 24
Different Alibaba Cloud VPCs are completely isolated from each other.
By default, the VPCs cannot communicate with each other over Intranet, but you can establish VPN connections via the Internet to achieve interconnection between VPCs.
- A. False
- B. True
Answer: B
NEW QUESTION # 25
Alibaba Cloud Object Storage Service (OSS) is a cloud storage service that features massive capacity, outstanding security, low costs, and high reliability. In an OSS bucket, all elements are stored as________.
- A. Objects
- B. Hashes
- C. Keys
- D. Stubs
Answer: A
Explanation:
OSS does not use a hierarchical structure for objects, but instead uses a flat structure. All elements are stored as objects in buckets. To use OSS in the same manner in which local file systems are used, you can configure Cloud Storage Gateway (CSG).
https://www.alibabacloud.com/help/doc-detail/31817.htm
NEW QUESTION # 26
RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning.
- A. False
- B. True
Answer: B
NEW QUESTION # 27
Object Storage Service (OSS) supports access logging. A bucket owner can activate access logging for their buckets in the OSS management console. When access logging is activated for bucket A, OSS automatically accesses the request logs for this bucket (in hours) and generates and writes an object to the user-specified bucket B according to certain naming rules. Which of the following statements is true for OSS logging?
- A. Buckets A and B must be the same bucket.
- B. Buckets A and B must be different buckets.
- C. Buckets A and B can belong to different users.
- D. Buckets A and B can be separate buckets (or a single bucket) but they must belong to the same user
Answer: D
Explanation:
Explanation
OSS logging is a feature that allows you to record the access requests to your OSS buckets. You can enable and configure logging for a bucket in the OSS console or by using the OSS API. When logging is enabled for a bucket A, OSS automatically generates access log objects every hour and stores them in a specified bucket B: The log objects follow a predefined naming convention that includes the source bucket name, the date, the hour, and a unique string.
The documentation also states that buckets A and B can be separate buckets or the same bucket, but they must belong to the same user1. This means that you cannot store the access logs of one user's bucket in another user's bucket. Therefore, the correct answer is A.
References:
1: Logging - Object Storage Service - Alibaba Cloud Documentation Center
NEW QUESTION # 28
When using Alibaba Cloud SLB. you can set different weights for backend ECS instances The higher the weight of a backend ECS instance the more load will be assigned to it An SLB instance has 5 ECS instances in the backend server pool, all of which are healthy Among these 5 ECS instances, the weight of ecs_inst1 is set to 100. Which of the following statements is correct?
- A. Based on SLB's working mechanism, approximately 20% of loads will be assigned to ecs_inst1
- B. We do not know the weight settings of the remaining 4 ECS instances, so we cannot tell what would happen
- C. Based on request level parameters of external requests, all requests with a request level parameter of 100 will be transferred to ecs_inst1
- D. 100% of loads will be assigned to ecs__inst1, and the remaining 4 ECS instances will stay idle
Answer: B
Explanation:
Explanation
When using Alibaba Cloud SLB, you can set different weights for backend ECS instances. The higher the weight of a backend ECS instance, the more load will be assigned to it. However, the load distribution is not based on the absolute value of the weight, but on the proportion of the weight in the total weight of all healthy backend ECS instances. For example, if there are two healthy backend ECS instances with weights of 100 and
200 respectively, the first instance will receive 33.3% of the load, and the second instance will receive 66.7% of the load. Therefore, to determine the load distribution of the 5 ECS instances in the question, we need to know the weight settings of the remaining 4 ECS instances. Without this information, we cannot tell what would happen. The other options are incorrect because they are based on wrong assumptions or misunderstandings of the SLB weight setting mechanism.
NEW QUESTION # 29
If you want to build a secure and isolated network environment on Alibaba Cloud; meanwhile, design your network topology and specify Intranet IP addresses or CIDR Blocks in this network environment as needed, you can choose
- A. Auto Scaling
- B. Leased line
- C. Virtual Private Cloud (VPC)
- D. Express Connect
Answer: C
Explanation:
Explanation
According to the Alibaba Cloud VPC documentation1, a virtual private cloud (VPC) is a virtual network dedicated to your Alibaba Cloud account. You have full control over your VPC, such as specifying the CIDR block, configuring route tables and gateways, and creating subnets. A VPC is an isolated network environment that provides security and flexibility for your cloud computing resources. You can use a VPC to build a secure and isolated network environment on Alibaba Cloud, design your network topology, and specify intranet IP addresses or CIDR blocks in this network environment as needed. Therefore, option B is the correct choice for your scenario. References: What is a VPC? and Alibaba Cloud Virtual Private Cloud.
NEW QUESTION # 30
Alibaba Cloud Elastic Compute Service (ECS) instances in different Security Groups will definitely have no way to communicate with each other.
- A. False
- B. True
Answer: B
NEW QUESTION # 31
Object Storage Service (OSS) supports access logging. A bucket owner can activate access logging for their buckets in the OSS management console. When access logging is activated for bucket A, OSS automatically accesses the request logs for this bucket (in hours) and generates and writes an object to the user-specified bucket B according to certain naming rules. Which of the following
statements is true for OSS logging?
- A. Buckets A and B must be the same bucket.
- B. Buckets A and B must be different buckets.
- C. Buckets A and B can belong to different users.
- D. Buckets A and B can be separate buckets (or a single bucket) but they must belong to the same user
Answer: D
NEW QUESTION # 32
Many of Alibaba Cloud services provide highly reliable data storage capacity. For example, Object Storage Service (OSS) promises that its data reliability is no less than 99 99999999%. This high data reliability is solely achieved by RAID 0+1 redundancy technology.
- A. False
- B. True
Answer: B
NEW QUESTION # 33
A Virtual Private Cloud (VPC) is an isolated network environment that is completely isolated from each other The following statements about VPC are correct_________. (Number of correct answers: 2)
- A. The internal networks of different VPCs are completely isolated and can be interconnected through IP addresses mapped to the outside.
- B. Each VPC has an independent tunnel ID, and a tunnel ID corresponds to a virtualized network.
- C. ECS instances in a VPC use security group firewalls for Layer 2 network access control.
- D. Subnets can be divided like the traditional network environment. Different cloud servers within each subnet are connected by the same router and different subnets are interconnected by switches.
Answer: A,B
Explanation:
Explanation
According to the Alibaba Cloud Academy, a VPC is an isolated network environment that is completely isolated from each other. Each VPC has an independent tunnel ID, and a tunnel ID corresponds to a virtualized network. This means that different VPCs cannot communicate with each other through the tunnel ID. Subnets are not divided like the traditional network environment, but rather are logical divisions of the VPC. Different cloud servers within each subnet are connected by the same router, but different subnets are interconnected by route tables, not switches. ECS instances in a VPC use security group firewalls for Layer 4 network access control, not Layer 2. The internal networks of different VPCs are completely isolated and can be interconnected through IP addresses mapped to the outside, such as NAT Gateway or EIP. References: ACP Cloud Computing Certification Preparation Course - Internetworking with VPC, Alibaba Cloud VPC User Guide
NEW QUESTION # 34
Once ECS is created, you can't change its private IP address anymore.
- A. False
- B. True
Answer: A
Explanation:
Explanation
You can change the private IP address of an ECS instance after it is created, but you need to stop the instance first. The private IP address must be within the CIDR block of the VPC and the VSwitch that the instance belongs to. You can modify the private IP address of an instance by using the console or the API.
References: 3, ACP Cloud Computing Certification - Alibaba Cloud Academy After stopping an Alibaba Cloud Elastic Compute Service (ECS) instance, you will still be charged for some resources related to that ECS instance, such as disks, snapshots, and public IP addresses, until you release them. The charging policy depends on the billing method and network type of the ECS instance. For pay-as-you-go instances, you can choose whether to enable the No fees for stopped instances feature, which allows you to stop paying for vCPUs and memory when the instance is stopped. However, this feature is only available for VPC-connected instances in some regions1. For subscription instances, you will be charged for the entire subscription period regardless of whether the instance is running or stopped2. References:
1: Billing FAQ - Elastic Compute Service - Alibaba Cloud Documentation Center1
2: Billing overview - Elastic Compute Service - Alibaba Cloud Documentation Center2
NEW QUESTION # 35
Once ECS is created, you can't change its private IP address anymore.
- A. False
- B. True
Answer: B
NEW QUESTION # 36
When you create an Alibaba Cloud VPC. a VRouter and a route table will be created automatically. Which of the following statements is NOT correct about the route table?
- A. This route table cannot be deleted
- B. Each VRouter may have multiple route tables.
- C. When a VPC is deleted, the corresponding route table is also deleted.
- D. The routing entries of the route table can not be modified manually.
Answer: D
Explanation:
Explanation
A route table is a set of rules that determine how network traffic is routed within a VPC or between different network instances1. A VRouter is a hub that connects all VSwitches in the same VPC and enables communication between them2. When you create a VPC, a VRouter and a default route table are automatically created for the VPC1. The default route table contains system routes that are automatically generated by the system based on the network topology1. The system routes cannot be modified or deleted1.
However, you can also create custom route tables for your VPC and add custom routes to them1. Custom routes are manually configured by users to route traffic to specific destinations, such as other VPCs, VBRs, VPN Gateways, or NAT Gateways1. Custom routes can be modified or deleted as needed1. You can also associate VSwitches with different route tables to implement fine-grained routing control1.
Therefore, the statement that the routing entries of the route table can not be modified manually is not correct, as it only applies to system routes, not custom routes. The other statements are correct, as each VRouter may have multiple route tables, one default and several custom1; when a VPC is deleted, the corresponding route table is also deleted3; and the default route table cannot be deleted1. References: Route table overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, VRouter overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, Delete a VPC - Virtual Private Cloud - Alibaba Cloud Documentation Center
NEW QUESTION # 37
OSS supports multi-part uploading for large files, namely dividing a large file into multiple parts and uploading them in order. This function is suitable for scenarios such as uploading large files or uploading files with poor connectivity.
After completing all the multi-part uploading tasks, if you forget to invoke the "Complete Multipart Upload" interface, there will be fragment files left in OSS, occupying bucket storage space-To facilitate deleting those files, OSS provides the________function.
- A. OpenAPI batch deletion
- B. Fragment management
- C. Online batch deletion
- D. Bucket clearing
Answer: C
NEW QUESTION # 38
......
Alibaba Cloud ACP-Cloud1 exam is an online, proctored exam that can be taken from anywhere in the world. ACP-Cloud1 exam is designed to be flexible and convenient, allowing professionals to study and prepare for the exam at their own pace. ACP-Cloud1 exam is also available in multiple languages, making it accessible to professionals from different parts of the world.
Pass Your Alibaba Cloud Exam with ACP-Cloud1 Exam Dumps: https://lead2pass.real4prep.com/ACP-Cloud1-exam.html