ACP-Cloud1 ACP Cloud Computing Professional

Loading demo links...

Showing 1–3 of 10 questions

Question 1

By using ApsaraDB for RDS to implement read/write splitting, which of the following can be achieved? (Number of correct answers 2)

Select all that apply, then click Submit answer.

  • Write requests are distributed to multiple instances.

  • Read requests are distributed to multiple instances.

  • Read/write requests to the database are separated.

  • Both read and write requests are distributed to multiple instance

Question 2

A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that

1. Must support secured remote O&M because the administrator often takes business trips.

2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)

Select all that apply, then click Submit answer.

  • Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M.

  • Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.

  • Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.

  • Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.

Question 3

Before data communication is setup, the security groups match the security group rules one by one to query whether to allow access requests Assume that the user has created two security group rules 1 and 2 The protocol type, port range, authorization type, and authorization object of the two security group rules are the same. The difference is that Rule 1 is a denial policy, rule 2 is an allowed policy, so the following statement is correct_______ (Number of correct answers 2)

Select all that apply, then click Submit answer.

  • If rule 1 and rule 2 have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect

  • If rule 1 and rule 2 have the same priority, the rule of the allowed policy takes effect first, and the rule that of the denial policy does not take effect.

  • If rule 1 and rule 2 have different priorities, the rule with a small priority number takes effect

  • If rule 1 and rule 2 have different priorities, the rule with a large priority number takes effect.