Alibaba ACP-CLOUD1 Exam (page: 3)
Alibaba ACP Cloud Computing Certification
Updated on: 25-Dec-2025

Viewing Page 3 of 37

After creating an RDS for MySQL read-only instance, which of the following CAN NOT be performed by the read-only instance in RDS management console?

  1. Parameter configuration
  2. Specification change
  3. SQL log auditing
  4. Intranet/Internet switchover

Answer(s): D

Explanation:

A read-only RDS instance is a replica of the primary RDS instance that can handle read requests and increase the read capability of the database system. A read-only RDS instance inherits the network type (intranet or internet) of the primary RDS instance and cannot switch between them. Therefore, option D is the correct answer.


Reference:

Create a read-only ApsaraDB RDS for MySQL instance, Instance types for read-only ApsaraDB RDS instances



Compared with traditional physical servers, upgrading an ECS instance is much easier.
Which of the following statements about upgrading an ECS instance is false?

  1. You can upgrade the CPU, memory, and bandwidth.
  2. Upgrading the configuration of the ECS instance requires no' redeployment or data migration.
  3. Upgrading network bandwidth does not require the ECS instance to restart.
  4. You can change an instance's operating system without rebooting.

Answer(s): D

Explanation:

Changing an instance's operating system requires creating a custom image or using a public image, and then replacing the system disk of the instance. This process will cause the instance to restart. Therefore, this statement is false.


Reference:

ECS User Guide: Replace the system disk (non-public image) and ECS User Guide: Replace the system disk (public image)



Which of the following privilege is required to manually install Alibaba Clod Security Center on the server?

  1. Database Access privilege
  2. Common user privilege
  3. System administrator privilege
  4. FTP service privilege

Answer(s): C

Explanation:

To manually install Alibaba Cloud Security Center on the server, you need to have the system administrator privilege. This is because the Security Center agent requires access to the system files and processes, and can perform security operations such as vulnerability scanning, intrusion detection, and threat blocking. A common user privilege or a database access privilege is not sufficient to install the Security Center agent. An FTP service privilege is irrelevant to the installation process.



If you need to accelerate a certain domain name (such as abc.com) via Alibaba Cloud Content Delivery Network (CDN), you must add it to "CDN Domain Name List" in the CDN service. After added successfully, you will get a CNAME address A Next, you need to modify domain name resolution and direct the domain name (such as abc.com) to CNAME address

  1. Which of the following is a NOT correct description of modifying domain name resolution?
  2. If your domain name (such as abc.com) is transferred to Alibaba Cloud in advance, and managed by the same Alibaba Cloud account, you can perform one-step resolution modification.
  3. The CNAME address allocated to the domain name (such as abc.com) will point to an IP address.
    This IP address resolving mechanism is intelligently managed by Alibaba Cloud CDN system.
  4. The DNS service provider used by the domain name (such as abc.com) must support intelligent resolution.
  5. The DNS service provider used by the domain name (such as abc.com) can be companies other than Alibaba Cloud.

Answer(s): C

Explanation:

The DNS service provider used by the domain name (such as abc.com) does not need to support intelligent resolution, because the CNAME address allocated to the domain name will point to an IP address that is intelligently managed by Alibaba Cloud CDN system. Therefore, option C is not a correct description of modifying domain name resolution.


Reference:

What is Alibaba Cloud CDN? - CDN - Alibaba Cloud Documentation Center and Alibaba Cloud CDN



If an administrator often needs to manage multiple ECS instances in an Alibaba Cloud VPC through the Internet Which of the following solutions can meet this need at low costs and without affecting system security.

  1. None of these answers are correct.
  2. Choose an ECS instance from VPC and make it as the bastion host And then, apply an EIP and bind it to this ECS instance. After that the administrator can manage other ECS instances through this bastion host.
  3. Modify the VPC Security Group policy, to allow access from the Internet.
  4. Bind an EIP to each of the ECS instances, and Jog on to each of these ECS instances to manage them.

Answer(s): B

Explanation:

A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks. The computer generally hosts a single application, for example a proxy server, and all other services are removed or limited to reduce the threat to the computer. It is hardened in this manner primarily due to its location and purpose, which is either on the outside of a firewall or in a demilitarized zone (DMZ) and usually involves access from untrusted networks or computers. In the context of Alibaba Cloud, a bastion host can be used to securely access and manage multiple ECS instances in a VPC through the Internet. By applying an EIP and binding it to the bastion host, the administrator can use SSH or RDP protocols to log on to the bastion host from the Internet, and then use the same protocols to access other ECS instances in the VPC through the private network. This way, the administrator can avoid exposing all the ECS instances to the Internet, which would increase the risk of attacks and incur higher costs. The bastion host can also be configured with security policies and monitoring tools to enhance the protection of the ECS instances in the VPC.


Reference:

Bastion Host, Access an ECS Instance by Using a Bastion Host



Viewing Page 3 of 37



Share your comments for Alibaba ACP-CLOUD1 exam with other users:

Ko Htet 10/17/2023 1:28:00 AM

thanks for your support.
Anonymous


Tai 8/28/2023 5:28:00 AM

wonderful material
SOUTH AFRICA