Alibaba Cloud spoto sure Pass Exam Acp-cloud1 Pdf by Amaia q63 vce pdf

Page: 8 / 12

Exam Name:	ACP Cloud Computing Certification
Exam Code:	ACP-Cloud1 Dumps
Vendor:	Alibaba Cloud	Certification:	Alibaba Cloud Computing
Questions:	176 Q&A's	Shared By:	amaia

Question 32

In Alibaba Cloud VPC, the device used for connecting each VSwitch is ________.

Options:

Route Table

VRouter

ECS

SLB

Discussion

Question 33

A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that

1. Must support secured remote O&M because the administrator often takes business trips.

2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)

Options:

Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M.

Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.

Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.

Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.

Discussion

Answer:

A, B, C

Explanation:

To meet the company’s security requirements, the following solutions should be used together:

A. Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M. This solution can support secure remote O&M, because VPN (Virtual Private Network) is a technology that creates a secure and encrypted connection over the Internet between the bastion host and the administrator’s device. VPN can protect the data transmitted between the bastion host and the administrator from being intercepted or tampered by malicious third parties1. Alibaba Cloud provides VPN Gateway service that allows users to create VPN connections between VPCs and on-premises data centers, or between VPCs in different regions2. Users can also use VPN images from Alibaba Cloud Marketplace, such as OpenVPN, to create VPN servers on ECS instances3.

B. Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems. This solution can also support secure remote O&M, because a bastion host is a special-purpose ECS instance that acts as a proxy or a gateway for accessing other ECS instances in the VPC. A bastion host can enhance the security of the ECS instances by limiting the exposure of the ECS instances to the public network, and by implementing security policies and monitoring tools on the bastion host4. Alibaba Cloud provides Bastionhost service that allows users to centrally manage the access to cloud servers from external networks and provide secure connections to VPC resources5.

C. Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups. This solution can isolate the networks between subsystems, because a security group is a virtual firewall that controls the inbound and outbound traffic of the ECS instances in the group. Users can configure security group rules to allow or deny access based on the network protocol, port, and source IP address. By deploying ECS instances running different subsystems to independent security groups, users can prevent unauthorized access or communication between the subsystems6.

The other solution is not suitable for the company’s scenario, for the following reason:

D. Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups. This solution cannot isolate the networks between subsystems, because ECS instances in the same security group can communicate with each other by default, regardless of whether they have intranet or internet IP addresses. Moreover, this solution may also prevent the ECS instances from accessing the internet or providing external services, which may affect the business operation of the company6.

References: What is a VPN? - Virtual Private Network - Cisco, VPN Gateway - Alibaba Cloud, OpenVPN - Alibaba Cloud Marketplace, Bastion Host - Alibaba Cloud Document Center, Bastionhost - Alibaba Cloud, Security groups - Elastic Compute Service - Alibaba Cloud

Kylo

What makes Cramkey Dumps so reliable? Please guide.

Sami Aug 29, 2024

Well, for starters, they have a team of experts who are constantly updating their material to reflect the latest changes in the industry. Plus, they have a huge database of questions and answers, which makes it easy to study and prepare for the exam.

Rosalie

I passed. I would like to tell all students that they should definitely give Cramkey Dumps a try.

Maja Aug 30, 2024

That sounds great. I'll definitely check them out. Thanks for the suggestion!

Fatima

Hey I passed my exam. The world needs to know about it. I have never seen real exam questions on any other exam preparation resource like I saw on Cramkey Dumps.

Niamh Oct 15, 2024

That's true. Cramkey Dumps are simply the best when it comes to preparing for the certification exam. They have all the key information you need and the questions are very similar to what you'll see on the actual exam.

Annabel

I recently used them for my exam and I passed it with excellent score. I am impressed.

Amirah Oct 28, 2024

I passed too. The questions I saw in the actual exam were exactly the same as the ones in the Cramkey Dumps. I was able to answer the questions confidently because I had already seen and studied them.

Question 34

Auto Scaling is a management service that can automatically adjust elastic computing resources based on your business needs and policies It supports adding an existing ECS instance into the scaling group but imposes certain requirements on instance region In this case, which of the following statements is true?

Options:

The instance and the scaling group must be in the same region and zone.

The instance and the scaling group must be in the same region but not necessarily the same zone.

Each scaling group can span up to two regions. After adding the ECS instance, the number of regions of all the ECS instances in the scaling group must be no greater than two.

The instance and the scaling group can be in different regions and zones.

Discussion

Question 35

A customer uses Alibaba Cloud Auto Scaling service and creates a scaling group. They set the "Minimum number of instances" to 6 and the "Maximum number of instances" to 8. After correctly configuring scaling settings, the customer adds a scaling rule “Adjust to 10 ECS instances” and creates a scheduled task based on this rule. Then, the customer checks the scaling group and sees it already contains 6 valid ECS instances. They then enable this scaling group immediately. How many ECS instances will be in the scaling group when the scheduled task is activated once?

Options: