Master Alibaba ACA-Cloud1 Exam with Reliable Practice Questions

Correct : B

According to the Alibaba Cloud Academy, Alibaba Cloud provides powerful security services that are the same level of security services used to support Alibaba Group's Double 11 Shopping Festival. However, you do not have to pay first before using any of the security services. Alibaba Cloud offers some security services for free, such as Anti-DDoS Basic, Server Guard, and Security Center Basic Edition. Other security services, such as Anti-DDoS Pro, WAF, and Security Center Enterprise Edition, are charged based on different billing methods, such as subscription, pay-as-you-go, or traffic-based. Therefore, the statement is false.Reference:Alibaba Cloud Security Services - Alibaba Cloud Security Course - Cloud Academy,Alibaba Cloud Security Pricing - Alibaba Cloud

Correct : B

According to the Alibaba Cloud Academy, Alibaba Cloud Object Storage Service (OSS) is a massive, highly available, secured and cost effective storage service. OSS is superior than self-built storage in all these aspects. One of the advantages of OSS is its high availability, which means that the data stored in OSS can be accessed anytime and anywhere with minimal downtime or interruption. OSS achieves high availability by ensuring data reliability of not less than 99.99999999%. Data reliability is the probability that the data stored in OSS is not lost or corrupted. OSS ensures data reliability by automatically backing up data with multiple redundant copies across different devices and facilities. Therefore, the option B is the correct answer that relates to the high availability of OSS.Reference:What is OSS? - Alibaba Object Storage Service Course - Cloud Academy, [Object Storage Service(OSS): Store Data Safely In The Cloud - Alibaba Cloud Blog]

Correct : A

According to the Alibaba Cloud Academy, Auto Scaling is a service that automatically creates and releases ECS instances based on pre-defined rules in order to scale services to match demand. Furthermore, it can configure server load balancer and relational database service white lists, without any manual intervention. Therefore, using Auto Scaling is the most preferred method from the perspective of cost and implementation simplicity, as it can dynamically adjust the number of ECS instances according to the traffic fluctuations, without requiring manual operations or wasting resources. The other methods are either too complex, inefficient, or costly to implement.Reference:Introduction to Alibaba Auto Scaling - Cloud Academy,ACA Cloud Computing Exam Preparation Course - Alibaba Cloud, Module 4: Cloud Computing Elasticity, Lesson 1: Auto Scaling, Slide 2.

Correct : B

Server Guard is a cloud-based security service that provides real-time protection for servers against intrusion events, such as brute force password cracking. Server Guard consists of a lightweight agent that is installed on the server and a cloud protection center that analyzes and responds to security threats.Server Guard can help the administrator to reduce the possibility of brute force password cracking by providing the following features1:

Password cracking protection: Server Guard can detect and block password cracking attempts on servers, such as SSH brute force attacks on Linux servers and RDP brute force attacks on Windows servers. Server Guard can also alert the administrator of the attack source, time, and frequency, and provide suggestions for password strengthening.

Webshell detection and removal: Server Guard can scan and remove webshells that are maliciously implanted on servers by hackers. Webshells are scripts that allow hackers to remotely execute commands on servers, such as stealing data, uploading files, or launching attacks. Server Guard can identify and delete webshells based on signature matching, behavior analysis, and machine learning.

Anti-virus and anti-ransomware: Server Guard can detect and terminate various types of malware, such as ransomware, mining programs, backdoor programs, worms, and trojans. Server Guard can also prevent the encryption and deletion of files by ransomware, and restore the files to their original state.

Security baseline check: Server Guard can perform security baseline checks on servers to evaluate their security posture and compliance level. Server Guard can check more than 40 security items, such as system configuration, account management, network security, and log audit. Server Guard can also provide security hardening suggestions and one-click fixes for the detected issues.

Security situation awareness: Server Guard can provide a comprehensive and visualized view of the security situation of the servers, such as the number of attacks, the attack sources, the attack types, the attack trends, and the security score. Server Guard can also provide security reports and recommendations for improving the security level of the servers.Reference:Security Center

Correct : A

A is the correct answer because RDS provides whitelist access policies that allow you to set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning. A whitelist is a security feature that specifies the IP addresses or CIDR blocks that are allowed to access your RDS instance. By default, the whitelist is empty, which means that no IP address can access your RDS instance. You can add IP addresses or CIDR blocks to the whitelist according to your business needs. You can also create multiple whitelist groups and assign different IP addresses or CIDR blocks to each group.This can help you manage the access permissions of different users or applications12