Alibaba Cloud Updated ACP-Cloud1 Exam Questions and Answers by vienna

https://cloudacademy.com/course/alibaba-security-monitoring-1275/introduction-to-cloud-monitor/#:~:text=Cloud%20Monitor%20is%20a%20service,safeguard%20your%20products%20and%20business .

Option A is correct because site monitoring is one of the functions provided by CloudMonitor. Site monitoring monitors the availability, connectivity, and domain name resolution of sites. It monitors the connectivity and response time of domain names, IP addresses, and ports, and sends alert notifications based on monitoring results1

Option B is correct because customized monitoring is one of the functions provided by CloudMonitor. Customized monitoring allows you to monitor the metrics of your own applications or services. You can use the CloudMonitor API or SDK to report custom metrics to CloudMonitor and view them on the CloudMonitor console. You can also configure alert rules for your custom metrics2

Option E is correct because cloud service monitoring is one of the functions provided by CloudMonitor. Cloud service monitoring monitors the metrics of Alibaba Cloud services, such as Elastic Compute Service (ECS), Object Storage Service (OSS), ApsaraDB for RDS, and Server Load Balancer (SLB). CloudMonitor collects the metrics of these services and displays them on the CloudMonitor console. You can also configure alert rules for these metrics2

Option C is incorrect because custom firewall is not a function provided by CloudMonitor. Custom firewall is a feature of Alibaba Cloud Security Center, which is a different service from CloudMonitor. Security Center provides security protection for your cloud resources and applications. Custom firewall allows you to customize firewall rules for your ECS instances and control the inbound and outbound traffic3

Option D is incorrect because operation auditing is not a function provided by CloudMonitor. Operation auditing is a feature of Alibaba Cloud ActionTrail, which is a different service from CloudMonitor. ActionTrail records the operations performed on your Alibaba Cloud resources and delivers the audit logs to OSS or Log Service for storage and analysis. Operation auditing helps you track the changes of your resources and comply with security standards4

References:

2: What is CloudMonitor? - CloudMonitor - Alibaba Cloud Documentation Center

1: Introduction to Cloud Monitor - Alibaba Security & Monitoring Course

3: [Security Center - Alibaba Cloud]

4: [ActionTrail - Alibaba Cloud]

ApsaraDB for RDS is a stable and reliable online database service that supports MySQL, SQL Server, PostgreSQL, MariaDB, and PPAS. ApsaraDB for RDS provides a read/write splitting feature that allows you to create read-only RDS instances, which can offload read requests from the primary RDS instance of your database system1. Read/write splitting is implemented by using a dedicated proxy endpoint, which routes read and write requests to different RDS instances based on the SQL statements and the read weights of the read-only instances2. By using ApsaraDB for RDS to implement read/write splitting, you can achieve the following benefits21:

Read requests are distributed to multiple instances. This can improve the read performance and availability of your database system, as well as balance the load among the read-only instances. You can specify the read weights of the read-only instances to control the distribution of read requests.

Read/write requests to the database are separated. This can reduce the pressure on the primary RDS instance and ensure the stability and security of the write operations. You only need to connect to the proxy endpoint, and the proxy will automatically route the read and write requests to the appropriate RDS instances.

The other statements are not correct, as write requests are not distributed to multiple instances, but only sent to the primary RDS instance2; and both read and write requests are not distributed to multiple instances, but separated by the proxy endpoint2. References: [ApsaraDB for RDS - Alibaba Cloud], Read/write splitting - - Alibaba Cloud Documentation Center, Use the read/write splitting feature to increase the processing capability of an ApsaraDB RDS instance

Pay-As-You-Go is a billing method that allows you to pay for resources after you use them. You are billed based on the actual usage of resources, such as the number of hours that an ECS instance runs or the amount of data that is transferred. Pay-As-You-Go is suitable for scenarios where the demand for resources is unpredictable, flexible, or short-term1. Pay-As-You-Go has the following advantages for the startup video streaming company:

No upfront payment: The company does not need to pay any fees in advance when they purchase ECS instances. They only pay for the resources that they actually use, which can help them save costs and optimize their cash flow1.

Flexible scaling: The company can easily scale up or down their ECS instances based on the actual demand for their service. They can add more ECS instances during peak hours or events, such as Christmas, and release them when the demand drops. They can also change the configurations of their ECS instances at any time, such as upgrading the CPU, memory, or bandwidth1.

No long-term commitment: The company does not need to commit to a long-term contract or subscription when they use Pay-As-You-Go. They can release their ECS instances at any time without incurring any penalties or fees. They can also switch to other billing methods, such as Subscription or Savings Plan, if their business needs change1.

The other billing methods of ECS are not as suitable as Pay-As-You-Go for the company’s scenario, for the following reasons:

Pay-As-You-Go with Reserved Instances: Reserved Instances are a type of discount coupon that can be used to deduct a portion of the fees incurred by Pay-As-You-Go instances that match the attributes of the Reserved Instances, such as region, zone, instance type, and operating system2. Reserved Instances require upfront payment and have a fixed term of one year or three years. They are suitable for scenarios where the demand for resources is stable and predictable, and where the user wants to enjoy lower prices than Pay-As-You-Go2. However, for the company’s scenario, Reserved Instances are not a good option, because they do not need to purchase a large number of ECS instances for a long period of time, and they want to have more flexibility and scalability in their resource management.

Subscription with Reserved Instances: Subscription is a billing method that allows you to pay for resources in advance for a specific period of time, such as one month, one year, or three years. You are billed based on the specifications and duration of the resources that you purchase, regardless of whether you use them or not. Subscription is suitable for scenarios where the demand for resources is stable and long-term, and where the user wants to enjoy lower prices than Pay-As-You-Go3. Subscription with Reserved Instances can further reduce the cost of Subscription instances by applying the Reserved Instances discounts to them2. However, for the company’s scenario, Subscription with Reserved Instances are not a good option, because they do not want to pay for resources in advance or commit to a long-term contract, and they want to have more flexibility and scalability in their resource management.

Pay-As-You-Go with Savings Plan: Savings Plan is a billing method that allows you to commit to a consistent amount of usage (measured in USD/hour) for a one-year or three-year term, and in exchange, receive a lower price for that usage4. Savings Plan can be applied to any Pay-As-You-Go instances that match the attributes of the Savings Plan, such as region, instance family, or operating system4. Savings Plan is suitable for scenarios where the demand for resources is stable and predictable, and where the user wants to enjoy lower prices than Pay-As-You-Go and more flexibility than Subscription4. However, for the company’s scenario, Savings Plan is not a good option, because they do not want to commit to a consistent amount of usage for a long period of time, and they want to have more flexibility and scalability in their resource management.

References: Pay-As-You-Go - Elastic Compute Service - Alibaba Cloud, Reserved Instances - Elastic Compute Service - Alibaba Cloud, Subscription - Elastic Compute Service - Alibaba Cloud, Savings Plan - Elastic Compute Service - Alibaba Cloud

 To manually install Alibaba Cloud Security Center on the server, you need to have the system administrator privilege. This is because the Security Center agent requires access to the system files and processes, and can perform security operations such as vulnerability scanning, intrusion detection, and threat blocking. A common user privilege or a database access privilege is not sufficient to install the Security Center agent. An FTP service privilege is irrelevant to the installation process.