Alibaba Cloud CAP-C01 問題集 : Alibaba Cloud Certified Professional: Cloud Architect

Camila has set up a simple blog hosted on a single Elastic Compute Service (ECS) instance, storing images and files on an Elastic Block Storage (EBS) disk within the ECS instance, and relying on an ApsaraDB RDS for MySQL instance for its data tier. Camila wants to scale up her blog and enhance both resilience and performance with minimal changes to the application.
As a Cloud Architect, which combination of actions can you take to improve both resilience and performance of the website? (Correct answers: 3)

• A. Take a snapshot of the current ECS instance and create a custom image. Use the image to provision a new ECS instance, and add both the original and new instances to a scaling group. Set up an Application Load Balancer (ALB) in front of the scaling group, and configure the scaling group to maintain a minimum of two ECS instances.
• B. Configure an Alibaba Cloud CDN distribution for the website.
• C. Migrate the images and files to a File Storage NAS instance that is mounted on every ECS instance.
• D. Configure an accelerated IP address in Global Accelerator for the access endpoint.
• E. Migrate the images and files to an Object Storage Service (OSS) bucket that is mounted via ossfs to every ECS instance.

A global telecommunications company hosts its web application on Alibaba ECS instances behind an Alibaba Cloud Application Load Balancer (ALB). The application has static data stored in Object Storage Service (OSS). The company is aiming to enhance performance and reduce latency for both static and dynamic content. The domain name is maintained by Alibaba Cloud DNS.
Which of the following solutions provides the required functionality with the LEAST configurations?

• A. Create an Alibaba Cloud CDN distribution with ALB as an origin and set up Global Accelerator with OSS as an endpoint. Configure DNS for routing.
• B. Configure an Alibaba Cloud CDN distribution with ALB as an origin and set up Global Accelerator with OSS as an endpoint. Use two unique DNS names for routing content independently.
• C. Use an Alibaba Cloud CDN distribution with OSS as an origin, and configure Global Accelerator with ALB and CDN endpoints. Create a custom domain for the application.
• D. Create an Alibaba Cloud CDN distribution with OSS and ALB as origins. Configure DNS to route traffic to the CDN distribution.

A telecommunications company is expanding its backend architecture on Alibaba Cloud to add new services but needs to consolidate security management. They use multiple VPCs and want to streamline authorization management across their services.
What strategy should they adopt to simplify security group management across VPCs?

• A. Use basic security groups to create rules referencing other security groups, simplifying traffic control.
• B. Leverage advanced security groups to contain higher IP counts across VPCs.
• C. Deploy network ACLs to manage traffic at the vSwitch level instead.
• D. Develop a centralized logging system for monitoring all security group activities.

A multinational corporation is designing its network architecture on Alibaba Cloud to support its distributed applications. Their requirements include:
* Private and high-speed connectivity between on-premises data centers and Alibaba Cloud VPCs across multiple regions.
* Centralized management and enforcement of network security policies.
* Comprehensive monitoring and logging of all network traffic for compliance and auditing purposes.
Which combination of Alibaba Cloud services should the corporation implement to meet these requirements MOST effectively? (Correct answers: 2)

• A. Use Alibaba Cloud Express Connect with Transit Router and integrate with Security Center.
• B. Set up Cloud Enterprise Network (CEN) and integrate with Simple Log Service.
• C. Deploy multiple VPN Gateways in each region and manage connections individually.
• D. Deploy Alibaba Cloud Global Accelerator for all inter-region traffic routing.
• E. Implement VPC peering between all regional VPCs and utilize Security Groups for access control.

Kenneth plans to deploy a real-time data processing platform on Alibaba Cloud to support his company ' s Internet-of-Things (IoT) business. The platform will handle millions of sensor data points collected from smart devices globally. Kenneth needs to ensure high throughput and low latency for data ingestion and analysis.
Which solutions should Kenneth consider integrating into the platform architecture to meet his expected performance requirements? (Correct answers: 3)

• A. Store time-series data in Alibaba Cloud ' s Time Series Database.
• B. Use ApsaraMQ for Kafka for high-throughput data streaming.
• C. Implement Alibaba Cloud Elastic MapReduce (EMR) for batch processing of large datasets.
• D. Deploy Function Compute to process data in real time as it arrives.