Free Access AlibabaCloud.ACP-Cloud1.v2024-06-09.q49 Practice Test (Page 6)

Question 21

Compared with traditional physical servers, upgrading an ECS instance is much easier. Which of the following statements about upgrading an ECS instance is false?

A.You can upgrade the CPU, memory, and bandwidth.

B.Upgrading the configuration of the ECS instance requires no' redeployment or data migration.

C.Upgrading network bandwidth does not require the ECS instance to restart.

D.You can change an instance's operating system without rebooting.

Question 22

Many websites have suffered DDoS attacks of different volumes. Therefore, accurate understanding of DDoS attacks is critical to website security protection. Which of the following statements about DDoS attacks is the MOST accurate?

A.A DDoS attacks crack the server's logon password by means of a massive number of attempts.

B.The main purpose of a DDoS attack is to prevent the target server from providing normal services. Currently, the DDoS attack is one of the strongest and most indefensible website attacks.

C.The purpose of a DDoS attack is to steal confidential information.

D.DDoS attacks primarily target databases.

Question 23

Different Alibaba Cloud VPCs are completely isolated from each other.
By default, the VPCs cannot communicate with each other over Intranet, but you can establish VPN connections via the Internet to achieve interconnection between VPCs.

A.False

B.True

Question 24

A video company uses SLB to distribute user requests to 20 ECS instances with the same configuration to response these requests. As the Spring Festival approaches, service traffic would double during holidays (based on past experience). Thus, you use Auto Scaling to elastically adjust computing resources. Since the services is online for many years, you have historic records that can help predict the upcoming service traffic and choose the scaling mode freely. In this scenario, which of the following options are feasible and with minimum operation efforts? (Number of correct answers: 2)

A.Cloud monitor and event-triggered task: Dynamically adds ECS instances during resource shortage and reduces ECS instances during idle hours by monitoring the CPU utilization rate and workload

B.Scheduled task: Increases the number of ECS instances to 40 on the first day of the holidays and reduce the number to 20 after the holidays.

C.Healthy check mode: Ensures that all the current ECS instances in scaling groups are working correctly to meet user access requests.

D.Manual mode: Set the minimum number of instances to 40 on the first day of the holidays and change the number to 20 after the holidays.

Question 25

SLB is a load balancing service that distributes traffic to multiple cloud servers It provides a wide range of functions to meet the needs of various business scenarios If a user wants to use SLB and ECS instances to deploy two-way authenticated HTTPS websites, the following statement is correct_______.

A.SLB can only host SSL certificates, not CA certificates.

B.You need to host server SSL certificates and client CA certificates on SLB

C.SLB can only host CA certificates, not SSL certificate

D.SLB can only support HTTPS one-way authentication

Correct Answer: B

Explanation
SLB (Server Load Balancer) is a service that distributes network traffic across groups of backend servers to improve the service capability and application availability1. SLB supports HTTPS listeners, which allow you to encrypt the data transmission between clients and SLB instances2. HTTPS is a secure version of HTTP that uses SSL/TLS protocols to provide data encryption, integrity, and authentication3.
To use HTTPS listeners, you need to upload SSL certificates to SLB. SSL certificates are digital certificates that use public key cryptography to verify the identity of a website and encrypt the data exchanged between the website and the visitors4. There are two types of SSL certificates: server certificates and client certificates.
Server certificates are issued by trusted certificate authorities (CAs) to verify the identity of the website owner and the domain name. Client certificates are issued by the website owner to verify the identity of the visitors5.
SLB supports both one-way and two-way authentication for HTTPS listeners. One-way authentication means that only the server identity is verified by the client. Two-way authentication means that both the server and the client identities are verified by each other. To use one-way authentication, you only need to upload the server SSL certificate to SLB. To use two-way authentication, you need to upload both the server SSL certificate and the client CA certificate to SLB. The client CA certificate is the root certificate or intermediate certificate of the CA that issues the client certificates.
Therefore, if you want to use SLB and ECS instances to deploy two-way authenticated HTTPS websites, you need to host server SSL certificates and client CA certificates on SLB. SLB can host both SSL certificates and CA certificates, and it supports HTTPS two-way authentication. The other statements are incorrect. References: Server Load Balancer(SLB) - Alibaba Cloud, Add an HTTPS listener - Server Load Balancer - Alibaba Cloud Documentation Center, What is HTTPS? - SSL.com, What is an SSL Certificate? - SSL.com, What is a Client Certificate? - SSL.com, [Configure two-way authentication for an HTTPS listener - Server Load Balancer - Alibaba Cloud Documentation Center]

Premium Bundle

Newest ACP-Cloud1 Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing ACP-Cloud1 Exam! BraindumpsPass.com now offer the updated ACP-Cloud1 exam dumps, the BraindumpsPass.com ACP-Cloud1 exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com ACP-Cloud1 pdf dumps with Exam Engine here:

Access ACP-Cloud1 Premium Version

(178 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 1721AlibabaCloud.ACP-Cloud1.v2025-05-08.q109; 1911AlibabaCloud.ACP-Cloud1.v2023-07-15.q27; 2115AlibabaCloud.ACP-Cloud1.v2022-10-18.q27; 2092AlibabaCloud.ACP-Cloud1.v2022-07-18.q23; 3124AlibabaCloud.ACP-Cloud1.v2022-01-17.q25

Latest Upload: 174NAHQ.CPHQ.v2026-09-03.q481; 113SAP.C-S4CPB-2602.v2026-09-02.q7; 109Cisco.700-805.v2026-09-02.q86; 161MSSC.CLT-4.0.v2026-09-02.q43; 126Fitness.NCSF-CPT.v2026-09-02.q18; 174Google.Generative-AI-Leader.v2026-09-02.q77; 139PECB.ISO-14001-Lead-Auditor.v2026-09-01.q39; 126Google.GCP-DE.v2026-09-01.q27; 160Cisco.300-820.v2026-09-01.q105; 154Cisco.500-220.v2026-09-01.q72