Important Alibaba ACP-Cloud1 Exam Questions

Answer: B, C

Explanation:

Alibaba Cloud provides two main products for Anti-DDoS protection: Anti-DDoS Origin Service, which protects against attacks at the origin server level, and Anti-DDoS Pro Service, which offers advanced DDoS mitigation for applications hosted on Alibaba Cloud. Security Center and Cloud Firewall offer different security functionalities but do not provide direct Anti-DDoS services.

Answer: A

Explanation:

To confirm a previously unhealthy instance is now healthy, Alibaba Cloud SLB requires three consecutive successful health checks. With a health check interval of 2 seconds and a response timeout of 5 seconds, each check cycle takes up to 5 seconds. Therefore, three successive health checks would take a minimum of 53=155 \times 3 = 1553=15 seconds in total. However, because the health checks are conducted at 2-second intervals, there's overlap, reducing the actual time to at least 11 seconds for the SLB to mark the instance as healthy.

Answer: A

Explanation:

Alibaba Cloud RDS automatically deploys instances in master-slave mode (high availability) without additional configuration or charges. This ensures data redundancy and disaster recovery by maintaining synchronous data replication from the master to the slave instance.

Answer: B

Explanation:

A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks. The computer generally hosts a single application, for example a proxy server, and all other services are removed or limited to reduce the threat to the computer. It is hardened in this manner primarily due to its location and purpose, which is either on the outside of a firewall or in a demilitarized zone (DMZ) and usually involves access from untrusted networks or computers. In the context of Alibaba Cloud, a bastion host can be used to securely access and manage multiple ECS instances in a VPC through the Internet. By applying an EIP and binding it to the bastion host, the administrator can use SSH or RDP protocols to log on to the bastion host from the Internet, and then use the same protocols to access other ECS instances in the VPC through the private network. This way, the administrator can avoid exposing all the ECS instances to the Internet, which would increase the risk of attacks and incur higher costs. The bastion host can also be configured with security policies and monitoring tools to enhance the protection of the ECS instances in the VPC. Reference: Bastion Host, Access an ECS Instance by Using a Bastion Host

Answer: B

Explanation:

When forwarding layer 7 (HTTP) requests, Alibaba Cloud SLB preserves the client's real IP address by including it in the X-Forwarded-For header. This allows the backend ECS instance to access the client's actual IP rather than the SLB's IP address. This practice is common for maintaining accurate client IP information in HTTP forwarding scenarios.