최신 CAP-C01 무료덤프 - Alibaba Cloud Certified Professional: Cloud Architect

문제1

Camila has set up a simple blog hosted on a single Elastic Compute Service (ECS) instance, storing images and files on an Elastic Block Storage (EBS) disk within the ECS instance, and relying on an ApsaraDB RDS for MySQL instance for its data tier. Camila wants to scale up her blog and enhance both resilience and performance with minimal changes to the application.
As a Cloud Architect, which combination of actions can you take to improve both resilience and performance of the website? (Correct answers: 3)

A. Migrate the images and files to a File Storage NAS instance that is mounted on every ECS instance.

B. Migrate the images and files to an Object Storage Service (OSS) bucket that is mounted via ossfs to every ECS instance.

C. Configure an accelerated IP address in Global Accelerator for the access endpoint.

D. Configure an Alibaba Cloud CDN distribution for the website.

E. Take a snapshot of the current ECS instance and create a custom image. Use the image to provision a new ECS instance, and add both the original and new instances to a scaling group. Set up an Application Load Balancer (ALB) in front of the scaling group, and configure the scaling group to maintain a minimum of two ECS instances.

정답: A,D,E

설명: (DumpTOP 회원만 볼 수 있음)

문제2

A company has a web server running on an Elastic Compute Service (ECS) instance that is bound with an Elastic IP address. The ECS instance resides in a default security group within a VPC. The network ACL has been modified to block all traffic. Keran is a Cloud Architect and has been assigned the task of making the web server accessible from everywhere on port 443.
Which combination of steps can Keran take to accomplish this task? (Correct answers: 2)

A. Update the network ACL to allow TCP port 443 from source 0.0.0.0/0.

B. Update the network ACL to allow inbound/outbound TCP port 443 from source 0.0.0.0/0 and to destination 0.0.0.0/0.

C. Create a security group rule to allow TCP port 443 from source 0.0.0.0/0.

D. Create a security group rule to allow TCP port 443 to destination 0.0.0.0/0.

E. Update the network ACL to allow inbound TCP port 443 from source 0.0.0.0/0 and outbound TCP ports 1024-65535 to destination 0.0.0.0/0.

정답: C,E

설명: (DumpTOP 회원만 볼 수 있음)

문제3

An e-commerce company needs to execute a daily scheduled job to aggregate and filter sales records stored in an Alibaba Cloud OSS bucket. Each object can be up to 10 GB in size. The task may take up to an hour to run with pre-determined CPU and memory requirements. The goal is to reduce operational management efforts.
Identify an appropriate architecture using Alibaba Cloud services to perform the scheduled job efficiently.

A. Configure Serverless Workflow to execute server-side processing directly on OSS data with Function Compute.

B. Use Function Compute with EventBridge to run a scheduled trigger daily.

C. Set up an ACK cluster with ECS (Elastic Compute Service) instances, managed through Auto Scaling and scheduled tasks using Serverless Workflow.

D. Deploy a Container Service for Kubernetes (ACK) cluster with Elastic Container Instance (ECI) as the launch type. Use EventBridge to schedule the job.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Muthu is a Cloud Architect who is designing the architecture of a new application being deployed to Alibaba Cloud. The application will run on Elastic Compute Service (ECS) pay-as-you-go instances and will automatically scale across multiple zones based on load. The ECS cluster will scale in and out frequently throughout the day. An Application Load Balancer (ALB) will handle the load distribution. The architecture needs to support distributed session data management.
What should Muthu do to ensure that the architecture supports distributed session data management?

A. Use STS (Security Token Service) for managing sessions.

B. Use session stickiness of the SLB to manage session data.

C. Use Tair (Redis OSS-Compatible) to manage and store session data.

D. Use CloudMonitor to manage sessions.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Belinda is designing an API-driven cloud communications platform. The application is hosted on Elastic Compute Service (ECS) instances behind a Network Load Balancer (NLB). It leverages API Gateway to serve public-facing APIs to customers. For security reasons, Belinda wants to protect the platform against web exploits like SQL injection and large, sophisticated DDoS attacks.
Which combination of solutions provides the MOST protection? (Correct answers: 2)

A. Use Alibaba Cloud Anti-DDoS Proxy to protect the NLB.

B. Use Alibaba Cloud Web Application Firewall (WAF) to protect the NLB.

C. Use Alibaba Cloud Security Center with Anti-DDoS Basic.

D. Use Alibaba Cloud Web Application Firewall (WAF) to protect API Gateway.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

A financial services firm is deploying a real-time analytics platform on Alibaba Cloud to analyze sensitive customer transaction data. The platform must ensure data encryption at rest and in transit, centralized encryption key management, and compliance with internal security policies.
As a Cloud Architect, which Alibaba Cloud services would you recommend for the firm to utilize to meet these requirements? (Correct answers: 3)

A. Configure Security Groups to restrict inbound traffic to ECS instances.

B. Enable Transparent Data Encryption in ApsaraDB RDS for data at rest.

C. Use SSL/TLS certificates from SSL Certificates Service for encrypting data in transit.

D. Deploy Redis on ECS instances for session management.

E. Implement Alibaba Cloud Key Management Service (KMS) to manage encryption keys securely.

정답: B,C,E

설명: (DumpTOP 회원만 볼 수 있음)

최신 CAP-C01 무료덤프 - Alibaba Cloud Certified Professional: Cloud Architect

우리와 연락하기

유용한 링크

최신 업데이트