QUESTION: 13

Which of the following privilege is required to manually install Alibaba Clod Security Center on the server?

Database Access privilege
Common user privilege
System administrator privilege
FTP service privilege

Answer(s): C

Explanation:

To manually install Alibaba Cloud Security Center on the server, you need to have the system administrator privilege. This is because the Security Center agent requires access to the system files and processes, and can perform security operations such as vulnerability scanning, intrusion detection, and threat blocking. A common user privilege or a database access privilege is not sufficient to install the Security Center agent. An FTP service privilege is irrelevant to the installation process.

Reveal Solution Next Question

QUESTION: 14

If you need to accelerate a certain domain name (such as abc.com) via Alibaba Cloud Content Delivery Network (CDN), you must add it to "CDN Domain Name List" in the CDN service. After added successfully, you will get a CNAME address A Next, you need to modify domain name resolution and direct the domain name (such as abc.com) to CNAME address

Which of the following is a NOT correct description of modifying domain name resolution?
If your domain name (such as abc.com) is transferred to Alibaba Cloud in advance, and managed by the same Alibaba Cloud account, you can perform one-step resolution modification.
The CNAME address allocated to the domain name (such as abc.com) will point to an IP address.
This IP address resolving mechanism is intelligently managed by Alibaba Cloud CDN system.
The DNS service provider used by the domain name (such as abc.com) must support intelligent resolution.
The DNS service provider used by the domain name (such as abc.com) can be companies other than Alibaba Cloud.

Answer(s): C

Explanation:

The DNS service provider used by the domain name (such as abc.com) does not need to support intelligent resolution, because the CNAME address allocated to the domain name will point to an IP address that is intelligently managed by Alibaba Cloud CDN system. Therefore, option C is not a correct description of modifying domain name resolution.

Reference:

What is Alibaba Cloud CDN? - CDN - Alibaba Cloud Documentation Center and Alibaba Cloud CDN

Reveal Solution Next Question

QUESTION: 15

If an administrator often needs to manage multiple ECS instances in an Alibaba Cloud VPC through the Internet Which of the following solutions can meet this need at low costs and without affecting system security.

None of these answers are correct.
Choose an ECS instance from VPC and make it as the bastion host And then, apply an EIP and bind it to this ECS instance. After that the administrator can manage other ECS instances through this bastion host.
Modify the VPC Security Group policy, to allow access from the Internet.
Bind an EIP to each of the ECS instances, and Jog on to each of these ECS instances to manage them.

Answer(s): B

Explanation:

A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks. The computer generally hosts a single application, for example a proxy server, and all other services are removed or limited to reduce the threat to the computer. It is hardened in this manner primarily due to its location and purpose, which is either on the outside of a firewall or in a demilitarized zone (DMZ) and usually involves access from untrusted networks or computers. In the context of Alibaba Cloud, a bastion host can be used to securely access and manage multiple ECS instances in a VPC through the Internet. By applying an EIP and binding it to the bastion host, the administrator can use SSH or RDP protocols to log on to the bastion host from the Internet, and then use the same protocols to access other ECS instances in the VPC through the private network. This way, the administrator can avoid exposing all the ECS instances to the Internet, which would increase the risk of attacks and incur higher costs. The bastion host can also be configured with security policies and monitoring tools to enhance the protection of the ECS instances in the VPC.

Reference:

Bastion Host, Access an ECS Instance by Using a Bastion Host

Reveal Solution Next Question

QUESTION: 16

Which of the following ports does RDS for MySQL listen on by default?

Port 8080
Port 3306
Port 3060
Port 3600

Answer(s): B

Explanation:

The port 3306 is the default port on which MySQL is usually configured. This port is used by MySQL clients and applications to connect to the MySQL server. If you are using any other port, you should allow traffic to that specific port instead. Alibaba Cloud RDS for MySQL also uses this port by default, unless you specify a different port when creating the RDS instance. You can view and modify the port number of your RDS instance in the RDS console.

Reference:

How to configure an Amazon RDS

environment for MySQL, Connecting to a DB instance running the MySQL database engine, [Create an ApsaraDB RDS for MySQL instance]

Reveal Solution Next Question

Free ACP-CLOUD1 Exam Braindumps (page: 4)

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Explanation:

Reference:

QUESTION: 16

Explanation:

Reference: