Pass the Alibaba Cloud Alibaba Cloud Computing ACP-Cloud1 Questions and answers with CertsForce

Alibaba Cloud provides two main options for securely connecting a VPC with a traditional IDC: VPN (Virtual Private Network) and a dedicated leased line connection. These methods enable stable and secure communication between the VPC and on-premises environments. HTTP agents and stepping stones (options B and C) are not standard or secure methods for IDC-VPC connectivity.

Alibaba Cloud SLB’s "Rewrite Cookie" mode allows selective session persistence for specific subdomains by setting and rewriting cookies as specified. For example, you can enable session persistence on vip.a.com while leaving img.a.com without it. SLB uses the rewritten cookie to direct subsequent requests to the previously assigned backend server.

The safest response to a seldom-used IP alert connecting to ApsaraDB for RDS is to adjust the IP whitelist to allow only trusted IP addresses. By limiting the IP addresses in the whitelist, unauthorized or unfamiliar IP addresses cannot access the database. This approach provides direct control over access to RDS and minimizes potential security risks. Checking SQL audit logs (as suggested in option D) is useful but not sufficient on its own for a comprehensive security response.

In Alibaba Cloud, a scaling group can be associated with multiple SLB instances as long as they are in the same region, allowing distributed load handling across multiple load balancers. However, there is no requirement for SLB instances or scaling configurations to be in the same zone, making it region-specific instead of zone-specific.

=================

 A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks. The computer generally hosts a single application, for example a proxy server, and all other services are removed or limited to reduce the threat to the computer. It is hardened in this manner primarily due to its location and purpose, which is either on the outside of a firewall or in a demilitarized zone (DMZ) and usually involves access from untrusted networks or computers. In the context of Alibaba Cloud, a bastion host can be used to securely access and manage multiple ECS instances in a VPC through the Internet. By applying an EIP and binding it to the bastion host, the administrator can use SSH or RDP protocols to log on to the bastion host from the Internet, and then use the same protocols to access other ECS instances in the VPC through the private network. This way, the administrator can avoid exposing all the ECS instances to the Internet, which would increase the risk of attacks and incur higher costs. The bastion host can also be configured with security policies and monitoring tools to enhance the protection of the ECS instances in the VPC. References: Bastion Host, Access an ECS Instance by Using a Bastion Host

ECS instance monitoring provides a process monitoring feature that allows you to check the status of specific processes, such as a Python process, and set alerts for automatic notifications if the process terminates unexpectedly. This method is quicker and more efficient than writing a custom script or manually logging in to the console.

In Alibaba Cloud OSS, a bucket cannot be deleted until all contents, including files and incomplete multipart upload segments, are removed. This prevents accidental data loss by ensuring no objects remain in the bucket before deletion.

 Cloud Firewall is a service that provides centralized protection for your cloud assets and prevents unauthorized access to your servers. Cloud Firewall can monitor and control the inbound and outbound traffic of your servers, and block malicious requests and attacks. Cloud Firewall can also detect and prevent brute force password cracking attempts by using intelligent algorithms and threat intelligence. Therefore, option A is the correct answer. References: What is Cloud Firewall?, Protect servers from brute force attacks

According to the Alibaba Cloud ECS documentation1, the recommended instance type for Tomcat is ecs.c5.xlarge, which has 4 vCPUs and 4 GiB of memory. This instance type is suitable for web applications that require high performance and low latency. The recommended instance type for Memcache is ecs.r5.large, which has 2 vCPUs and 16 GiB of memory. This instance type is optimized for memory-intensive applications that require high memory bandwidth and low latency. Therefore, option D is the most recommended configuration for deploying Tomcat and Memcache on two ECS instances. References: Instance type families and Alibaba Cloud Elastic Compute Service Product Introduction

In Alibaba Cloud, resizing the system disk of an ECS instance requires stopping the instance temporarily. This ensures data integrity and successful resizing. Once the system disk is resized, the instance can be restarted to reflect the new disk size.