QUESTION: 29

You are designing a solution for a startup company, the proposed solution is like this You suggest they use ECS instances to process requests from mobile App clients, and use SLB to distribute data traffic and ensure the load across each backend ECS instance is balanced.

Moreover to deal with volatile fluctuations in business volume (page views are much higher on the weekends), you also suggest they use Auto Scaling to dynamically increase or reduce computing resources.

The company is satisfied with the solution you proposed. However, they have one concern that when removing an idle instance from the scaling group: if Auto Scaling shuts the instance down directly, the service running on that instance will be abruptly terminated, resulting in poor user experience.

In order to eliminate your customer's concern, which of the following solutions should you recommend them?

Find the ECS instance that is going to be removed from the backend server pool of the SLB instancer and automatically set the weight of this ECS instance to 0. This instance will not be assigned with new requests, and will be automatically removed from the backend server pool after existing tasks are completed.
First, insert a script into the image for creating the ECS instance Second, make the script run automatically when the operating system in this ECS instances is about to shut down. This script contains the processing logic that can ensure the instance finish all the remaining tasks before shutting down.
Find the ECS instance that is going to be removed from the backend server pool of the SLB instance, and manually remove this instance from the backend server pool Applications running on this ECS instance will normally return results, but this instance will not be assigned with new requests.
Use the Lifecycle Hook function embedded m Auto Scaling Define a suitable timeout and a web hook to do the necessary work before the instance is removed.

Answer(s): D

Explanation:

According to the Alibaba Cloud Auto Scaling documentation1, the Lifecycle Hook feature allows you to perform custom operations on instances that are added to or removed from a scaling group. You can define a lifecycle hook to specify a timeout period and a web hook URL.
When an instance is about to be removed, Auto Scaling sends a notification to the web hook URL and waits for a response. During the timeout period, you can perform the necessary operations on the instance, such as gracefully shutting down the service, backing up the data, or sending a custom notification. After the operations are completed, you can send a response to the web hook URL to confirm the removal of the instance. This way, you can ensure that the instance is removed without affecting the user experience or causing data loss. Therefore, option D is the best solution to eliminate the customer's concern.

Reference:

Lifecycle hooks and Alibaba Cloud Auto Scaling.

Show Answer Next Question

QUESTION: 30

You have created two Alibaba Cloud VPCs in two different regions To establish communication between these two VPCs via the Intranet, you can________.

Use the VRouter to create a new route table to enable the communication
Use CEN to establish communication between VPCs
Create a new access rule through the Security Group to enable the communication
No operation is needed, as VPCs under the same account are connected through the Intranet by default

Answer(s): B

Explanation:

CEN is a service that allows you to create a global network for rapidly building a distributed business system with a hybrid cloud computing solution. CEN enables you to build a secure, private, and enterprise-class interconnected network between VPCs in different regions and your local data centers. CEN uses transit routers deployed in different regions to build a full-mesh network on top of the Alibaba Cloud global transmission network. CEN enables global network communication: The two transit routers can be connected through multiple highly available and highly reliable lines. To establish communication between two VPCs in different regions via the intranet, you can use CEN to attach the VPCs to the transit routers in their respective regions, and then create a bandwidth plan to allocate bandwidth resources for inter-region connections. This way, you can avoid the complexity and cost of setting up VPN or Express Connect connections between the VPCs, and enjoy the benefits of CEN, such as large-scale and on-demand networking, simplified network topology, flexible management, globally connected network, shortest-path algorithm, high redundancy, automatic route learning and advertisement, and bandwidth sharing and management.

Reference:

Introduce Cloud Enterprise Network CEN and how ... - Alibaba Cloud Academy, Cloud Enterprise Network (CEN)
- Alibaba Cloud, Attach a network instance to a CEN instance - Cloud Enterprise Network - Alibaba Cloud

Show Answer Next Question

QUESTION: 31

An enterprise hosts their servers (include both Linux and Windows servers) in a traditional IDC Every night hackers with IP addresses from many countries try to crack the password of their servers, making the administrator terribly worried about this However because of work requirements the remote management port of these servers must be opened to public network.

The administrator heard that Alibaba Cloud has solutions that can help customers improve the security of their systems Therefore, he/she wants to migrate the system to Alibaba Cloud.
Which of the following functions should the administrator activate in Alibaba Cloud to reduce the possibility of brute force password cracking?

Cloud Firewall
Anti-DDoS Origin Basic Edition
CloudMonitor
Security Center

Answer(s): A

Explanation:

Cloud Firewall is a service that provides centralized protection for your cloud assets and prevents unauthorized access to your servers. Cloud Firewall can monitor and control the inbound and outbound traffic of your servers, and block malicious requests and attacks. Cloud Firewall can also detect and prevent brute force password cracking attempts by using intelligent algorithms and threat intelligence. Therefore, option A is the correct answer.

Reference:

What is Cloud Firewall?, Protect servers from brute force attacks

Show Answer Next Question

QUESTION: 32

When you create an Alibaba Cloud VPC. a VRouter and a route table will be created automatically.
Which of the following statements is NOT correct about the route table?

Each VRouter may have multiple route tables.
When a VPC is deleted, the corresponding route table is also deleted.
This route table cannot be deleted
The routing entries of the route table can not be modified manually.

Answer(s): D

Explanation:

A route table is a set of rules that determine how network traffic is routed within a VPC or between different network instances. A VRouter is a hub that connects all VSwitches in the same VPC and enables communication between them.
When you create a VPC, a VRouter and a default route table are automatically created for the VPC1. The default route table contains system routes that are automatically generated by the system based on the network topology. The system routes cannot be modified or deleted.

However, you can also create custom route tables for your VPC and add custom routes to them. Custom routes are manually configured by users to route traffic to specific destinations, such as other VPCs, VBRs, VPN Gateways, or NAT Gateways. Custom routes can be modified or deleted as needed. You can also associate VSwitches with different route tables to implement fine-grained routing control.

Therefore, the statement that the routing entries of the route table can not be modified manually is not correct, as it only applies to system routes, not custom routes. The other statements are correct, as each VRouter may have multiple route tables, one default and several custom1; when a VPC is deleted, the corresponding route table is also deleted3; and the default route table cannot be deleted.

Reference:

Route table overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, VRouter overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, Delete a VPC - Virtual Private Cloud - Alibaba Cloud Documentation Center

Show Answer Next Question

Free Alibaba ACP-CLOUD1 Exam Questions

QUESTION: 29

Explanation:

Reference:

QUESTION: 30

Explanation:

Reference:

QUESTION: 31

Explanation:

Reference:

QUESTION: 32

Explanation:

Reference:

ACP-CLOUD1 Exam Discussions & Posts