(2025) ACP-Cloud1 Dumps and Practice Test (178 Questions)
Guide (New 2025) Actual Alibaba Cloud ACP-Cloud1 Exam Questions
Alibaba Cloud ACP-Cloud1 (ACP Cloud Computing Professional) Certification Exam is a professional certification program designed to validate the skills and knowledge of cloud computing professionals. ACP Cloud Computing Professional certification exam is offered by Alibaba Cloud, a leading cloud service provider that offers a comprehensive range of cloud computing products and services to organizations worldwide. The ACP-Cloud1 certification exam is designed for individuals who have a good understanding of cloud computing concepts and are looking to enhance their skills and knowledge in this field.
One of the key benefits of passing the ACP-Cloud1 exam is that it validates the candidate's skills and knowledge in cloud computing. It is a recognized certification that is highly valued by employers in the IT industry. ACP Cloud Computing Professional certification demonstrates that the candidate has the skills and knowledge required to design, deploy, and manage cloud-based solutions.
The ACP-Cloud1 exam covers a wide range of topics, including cloud computing concepts, architecture, deployment models, and security. ACP-Cloud1 exam also covers Alibaba Cloud products and services, such as Elastic Compute Service (ECS), Object Storage Service (OSS), and Relational Database Service (RDS). Candidates are expected to have a solid understanding of cloud computing fundamentals, as well as hands-on experience with Alibaba Cloud products and services.
NEW QUESTION # 36
SLB is a load balancing service that distributes traffic to multiple cloud servers It provides a wide range of functions to meet the needs of various business scenarios If a user wants to use SLB and ECS instances to deploy two-way authenticated HTTPS websites, the following statement is correct_______.
- A. SLB can only host SSL certificates, not CA certificates.
- B. SLB can only host CA certificates, not SSL certificate
- C. You need to host server SSL certificates and client CA certificates on SLB
- D. SLB can only support HTTPS one-way authentication
Answer: D
NEW QUESTION # 37
Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet functions currently provided by CloudMonitor? (Number of correct answers: 3)
- A. Custom firewall
- B. Site monitoring
- C. Operation auditing
- D. Cloud service monitoring
- E. Customized monitoring
Answer: B,D,E
Explanation:
https://cloudacademy.com/course/alibaba-security-monitoring-1275/introduction-to-cloud-monitor/#:~:
text=Cloud%20Monitor%20is%20a%20service,safeguard%20your%20products%20and%20business.
* Option A is correct because site monitoring is one of the functions provided by CloudMonitor. Site monitoring monitors the availability, connectivity, and domain name resolution of sites. It monitors the connectivity and response time of domain names, IP addresses, and ports, and sends alert notifications based on monitoring results1
* Option B is correct because customized monitoring is one of the functions provided by CloudMonitor.
Customized monitoring allows you to monitor the metrics of your own applications or services. You can use the CloudMonitor API or SDK to report custom metrics to CloudMonitor and view them on the CloudMonitor console. You can also configure alert rules for your custom metrics2
* Option E is correct because cloud service monitoring is one of the functions provided by CloudMonitor.
Cloud service monitoring monitors the metrics of Alibaba Cloud services, such as Elastic Compute Service (ECS), Object Storage Service (OSS), ApsaraDB for RDS, and Server Load Balancer (SLB).
CloudMonitor collects the metrics of these services and displays them on the CloudMonitor console. You can also configure alert rules for these metrics2
* Option C is incorrect because custom firewall is not a function provided by CloudMonitor. Custom firewall is a feature of Alibaba Cloud Security Center, which is a different service from CloudMonitor.
Security Center provides security protection for your cloud resources and applications. Custom firewall allows you to customize firewall rules for your ECS instances and control the inbound and outbound traffic3
* Option D is incorrect because operation auditing is not a function provided by CloudMonitor. Operation auditing is a feature of Alibaba Cloud ActionTrail, which is a different service from CloudMonitor.
ActionTrail records the operations performed on your Alibaba Cloud resources and delivers the audit logs to OSS or Log Service for storage and analysis. Operation auditing helps you track the changes of your resources and comply with security standards4 References:
* 2: What is CloudMonitor? - CloudMonitor - Alibaba Cloud Documentation Center
* 1: Introduction to Cloud Monitor - Alibaba Security & Monitoring Course
* 3: [Security Center - Alibaba Cloud]
* 4: [ActionTrail - Alibaba Cloud]
NEW QUESTION # 38
Alibaba Cloud Content Delivery Network (CDN) is a distributed network that is built and overlaid on the bearer network Moreover it is composed of edge node server clusters distributed across different regions. It replaces the traditional data transmission mode, which is centered on Web servers. When using Alibaba Cloud CDN, a user's request wilt first reach the edge node, and then receive data from the origin site by means of back-to-source Moreover, the admin can obtain visitor's real IP on the origin site. Which of the following descriptions relate to "obtaining visitors real IP" are correct? (Number of correct answers: 2)
- A. You can one-step activate the "recording visitor's real IP" function in Alibaba Cloud CDN console to directly view the visitor's real IP in the access log.
- B. "Visitor's real IP" is saved in "X-Forwarded-For" header in HTTP protocol. It can be directly obtained in the user-defined LOG of Apache and Nginx.
- C. In Windows, if IIS is used: after installing "F5XForwardedFor" extension module. 'Visitor's real IP" can then be seen in the log.
- D. "Visitor's real IP" can only be obtained by modifying the application
Answer: A,B
Explanation:
Alibaba Cloud CDN can record the real IP address of a visitor in the HTTP header field X-Forwarded-For, which can be obtained by the origin server or the user-defined log of Apache and Nginx. Alibaba Cloud CDN also provides a one-click function to enable the recording of the visitor's real IP address in the console, which can be viewed in the access log. References:
* Obtain the real IP address of a client from the origin server - Dynamic Content Delivery Network - Alibaba Cloud Documentation Center1
* Welcome to Alibaba Cloud and find out more detail about cdn real ip2
NEW QUESTION # 39
When using Alibaba Cloud SLB, users can enable the health check function If a backend ECS instance A is running abnormally, SLB will isolate it and forward the requests to other ECS instances, and when the backend ECS instance A is back to normal, SLB will again forward requests to it.
- A. False
- B. True
Answer: B
Explanation:
Explanation
When using Alibaba Cloud SLB, users can enable the health check function to monitor the availability of the backend ECS instances. If a backend ECS instance A is running abnormally, SLB will stop forwarding requests to it and distribute them to other healthy ECS instances. This way, SLB can ensure the high availability and reliability of the service. When the backend ECS instance A is back to normal, SLB will resume forwarding requests to it. SLB performs health checks on the backend ECS instances at regular intervals and updates their status accordingly. Users can configure the health check parameters such as the protocol, port, interval, timeout, and threshold on the SLB console or by using the API. References: 1 - Health checks - Server Load Balancer - Alibaba Cloud Document Center - Health check overview
NEW QUESTION # 40
The maximum number of connections for an RDS instance depends on ____________.
- A. Disk capacity
- B. Network traffic
- C. Memory size
- D. CPU utilization rate
Answer: C
Explanation:
The maximum number of connections to an RDS instance primarily depends on the memory size of the instance. Higher memory capacity allows for more simultaneous connections, as memory is a key resource in managing and maintaining connections. Alibaba Cloud RDS scales the connection limit based on the instance's memory allocation to ensure stable database performance.
NEW QUESTION # 41
Company A constructed a sales management platform using three Elastic Compute Service (ECS) instances. One of the instances runs MySQL, and is used as the database server. The other two instances are used as Web servers After some time, the number of employees in Company A dramatically increases, leading to higher sales volumes At the same time, the platform response speed is gradually decreasing too.
According to the report from CloudMonitor, the average CPU utilization rate of the two Web servers exceeds 70%, and database load
reaches 75% Company A can select Alibaba Cloud_________ services.to cope with the issue and optimize the performance. (Number of correct answers: 2)
- A. Use Content Delivery Network (CDN) to enhance content loading speed
- B. Import database data into Object Storage Service (OSS) to share the storage pressure on the platform
- C. Replace the self-built MySQL database with ApsaraDB for RDS to obtain better database performance, and utilize RDS read-only instances to handle read-only requests
- D. Incorporate Server Load Balancer (SLB) and add additional ECS instances to relieve the load on existing ECS instances
Answer: C,D
NEW QUESTION # 42
Alibaba Cloud Object Storage Service (OSS) is a massive, highly available, secured, and cost-effective storage service. One of the special characteristics of OSS is its superior data reliability due to its underlying backup technology and policies. Which of the following statements about OSS backup is correct?
- A. OSS leverages RAID0+1 configuration of its underlying physical hard disks. There is no impact even if
2 hard disks were to fail simultaneously. - B. Customers have to safeguard their own data. OSS provides various backup interfaces to facilitate off- site backups.
- C. OSS supports 3 internal data copies, so the data can be manually recovered should there be any problem.
- D. OSS supports 3 internal data copies; no human intervention is required to recover the data when anything goes wrong.
Answer: D
Explanation:
Alibaba Cloud OSS automatically maintains three copies of each data object to ensure data reliability and redundancy. This setup allows OSS to recover data automatically without human intervention in case of hardware or system failures, ensuring high data durability.
NEW QUESTION # 43
When a customer uses Alibaba Cloud Object Storage Service (OSS) service and finds there exist an amount of Internet downstream traffic, he/she can use Alibaba Cloud Content Delivery Network (CDN) service to reduce the traffic cost.
Because the Internet traffic cost of CDN is lower than that of OSS, moreover, the back-to-source traffic cost from CDN to OSS is also lower than a user access to OSS directly.
- A. False
- B. True
Answer: B
Explanation:
Explanation
Alibaba Cloud Content Delivery Network (CDN) is a distributed network that delivers content to users based on their geographic locations. CDN can reduce the latency and improve the user experience of accessing content from the Internet. CDN can also reduce the Internet downstream traffic of OSS by caching the content in the edge nodes of CDN. The Internet traffic cost of CDN is lower than that of OSS, and the back-to-source traffic cost from CDN to OSS is also lower than a user access to OSS directly. Therefore, using CDN can reduce the traffic cost of OSS. References: Object Storage Service (OSS) - Alibaba Cloud, Storage Services Overview:OSS - Alibaba Cloud, Introduction to Object Storage Service - Alibaba Cloud, Object Storage Service(OSS): Store Data Safely In The Cloud
NEW QUESTION # 44
If you need to accelerate a certain domain name (such as abc.com) via Alibaba Cloud Content Delivery Network (CDN), you must add it to "CDN Domain Name List" in the CDN service. After added successfully, you will get a CNAME address A Next, you need to modify domain name resolution and direct the domain name (such as abc.com) to CNAME address A. Which of the following is a NOT correct description of modifying domain name resolution?
- A. The DNS service provider used by the domain name (such as abc.com) can be companies other than Alibaba Cloud.
- B. The DNS service provider used by the domain name (such as abc.com) must support intelligent resolution.
- C. The CNAME address allocated to the domain name (such as abc.com) will point to an IP address. This IP address resolving mechanism is intelligently managed by Alibaba Cloud CDN system.
- D. If your domain name (such as abc.com) is transferred to Alibaba Cloud in advance, and managed by the same Alibaba Cloud account, you can perform one-step resolution modification.
Answer: B
Explanation:
Explanation
The DNS service provider used by the domain name (such as abc.com) does not need to support intelligent resolution, because the CNAME address allocated to the domain name will point to an IP address that is intelligently managed by Alibaba Cloud CDN system. Therefore, option C is not a correct description of modifying domain name resolution. References: What is Alibaba Cloud CDN? - CDN - Alibaba Cloud Documentation Center and Alibaba Cloud CDN
NEW QUESTION # 45
Alibaba Cloud provides comprehensive security protection covering networks, hosts, applications, databases, and content for on-cloud clients. Users using Alibaba Cloud services only need to focus on their own services, without the need to pay any attention to security protection issues.
- A. False
- B. True
Answer: A
Explanation:
Alibaba Cloud provides comprehensive security protection covering networks, hosts, applications, databases, and content for on-cloud clients, but users still need to pay attention to security protection issues. Alibaba Cloud and its customers are jointly responsible for the security of customers' applications built on Alibaba Cloud. With security responsibilities shared between Alibaba Cloud and its customers, Alibaba Cloud provides a secure infrastructure to decrease the enterprise security burden of customers. As such, customers can configure and use cloud products in a secure manner, thus relieving much of the underlying security burdens while allowing customers to focus more on their core business needs. However, customers still need to follow the best practices and guidelines for cloud security, such as using strong passwords, enabling multi- factor authentication, encrypting sensitive data, applying security patches, etc. Customers also need to monitor and manage the security risks and incidents of their cloud environment using Alibaba Cloud's security products and services, such as Security Center, ActionTrail, Cloud Firewall, etc. References: Cloud Security- Alibaba Cloud, Security & Compliance Center, Shared Responsibility
NEW QUESTION # 46
Which of the following statements about an OSS bucket is NOT correct?
- A. Every user can create more than one bucket.
- B. There is no limitation on the number of objects inside a bucket.
- C. Every bucket must have a unique name.
- D. The bucket name can be changed after creation.
Answer: D
Explanation:
In Alibaba Cloud Object Storage Service (OSS), once a bucket is created, its name cannot be changed. This rule aligns with OSS's design to ensure global uniqueness and consistency in bucket naming across regions.
Users can create multiple buckets, and each bucket can store an unlimited number of objects, provided the bucket name remains unique and immutable after creation.
NEW QUESTION # 47
Many cloud computing service providers support users to activate/create a cloud service through Open API.
Which of the following protocols is most not likely to be supported by these Open API?
- A. PPPoE
- B. HTTP
- C. Restful
- D. Web Service
Answer: A
Explanation:
PPPoE stands for Point-to-Point Protocol over Ethernet, which is a network protocol that encapsulates PPP frames in Ethernet frames and allows multiple computers to share a single Internet connection. PPPoE is typically used by Internet service providers (ISPs) to provide broadband access to their customers, such as DSL or cable modem. PPPoE is not a protocol that is commonly supported by Open API for cloud computing service providers, because it is not designed for web-based communication and requires a dedicated connection between the client and the server. Open API, on the other hand, is a term that refers to a set of publicly available application programming interfaces (APIs) that allow developers to access the functionality and data of cloud computing service providers. Open API usually follows standard protocols that are widely used on the web, such as HTTP, Restful, and Web Service. HTTP stands for Hypertext Transfer Protocol, which is the foundation of data communication on the web. HTTP defines how messages are formatted and transmitted, and what actions web servers and browsers should take in response to various commands. HTTP is a stateless protocol, which means that each request is independent and does not depend on any previous requests or responses. Restful stands for Representational State Transfer, which is an architectural style for designing web services that are based on the concept of resources. Restful web services use HTTP methods (such as GET, POST, PUT, and DELETE) to perform operations on resources, and use standard formats (such as JSON or XML) to exchange data. Restful web services are stateless, scalable, and cacheable, and aim to provide a uniform interface for interacting with different types of resources. Web Service is a generic term that refers to any software service that is available over the web and uses a standardized format for communication, such as SOAP or REST. Web Service allows different applications to communicate and exchange data across different platforms and languages. Web Service can be described using a specification language, such as WSDL or OpenAPI, which defines the structure, operations, and parameters of the service.
Web Service can also be registered and discovered using a directory service, such as UDDI or Swagger.
NEW QUESTION # 48
Alibaba Cloud SLB provides certificate upload and management services. You can bind the required certificate when creating a Listener. When using ___________ protocol, is a certificate mandatory?
- A. TCP
- B. HTTP
- C. HTTPS
- D. PPPoE
Answer: C
Explanation:
Certificates are mandatory when using the HTTPS protocol with Alibaba Cloud SLB to secure data transmission between clients and the SLB instance. HTTPS (HTTP Secure) requires an SSL/TLS certificate to encrypt the data, ensuring secure communication over the network. For protocols like HTTP or TCP, a certificate is not required, as they do not natively support encryption.
NEW QUESTION # 49
You have set an alert policy for the disk usage of an ECS instance by using Alibaba Cloud CloudMonitor.
Each measurement cycle lasts for 5 minutes, during which the average disk usage is measured. If the average disk usage exceeds 80% for five consecutive measurement cycles, an alert will be reported. After your average disk usage exceeds 80%, how long will it take to receive an alert?
- A. 30 minutes
- B. 0 minutes
- C. 20 minutes
- D. 40 minutes
Answer: A
Explanation:
With a measurement cycle of 5 minutes and a requirement for five consecutive cycles where disk usage exceeds 80%, it would take 5×5=255 \times 5 = 255×5=25 minutes for CloudMonitor to confirm the condition. After confirmation, CloudMonitor typically processes and sends the alert, which may take an additional 5 minutes, totaling approximately 30 minutes before you receive the alert.
NEW QUESTION # 50
After stopping an Alibaba Cloud Elastic Compute Service (ECS) instance, since the ECS instance is stopped, you will not be charged for anything related to that ECS instance until you start the instance again regardless of which region the instance is located in.
- A. False
- B. True
Answer: B
NEW QUESTION # 51
Company A constructed a sales management platform using three Elastic Compute Service (ECS) instances. One of the instances runs MySQL, and is used as the database server. The other two instances are used as Web servers After some time, the number of employees in Company A dramatically increases, leading to higher sales volumes At the same time, the platform response speed is gradually decreasing too.
According to the report from CloudMonitor, the average CPU utilization rate of the two Web servers exceeds 70%, and database load reaches 75% Company A can select Alibaba Cloud_________ services.to cope with the issue and optimize the performance. (Number of correct answers: 2)
- A. Use Content Delivery Network (CDN) to enhance content loading speed
- B. Import database data into Object Storage Service (OSS) to share the storage pressure on the platform
- C. Replace the self-built MySQL database with ApsaraDB for RDS to obtain better database performance, and utilize RDS read-only instances to handle read-only requests
- D. Incorporate Server Load Balancer (SLB) and add additional ECS instances to relieve the load on existing ECS instances
Answer: C,D
NEW QUESTION # 52
An enterprise hosts their servers (include both Linux and Windows servers) in a traditional IDC Every night hackers with IP addresses from many countries try to crack the password of their servers, making the administrator terribly worried about this However because of work requirements the remote management port of these servers must be opened to public network.
The administrator heard that Alibaba Cloud has solutions that can help customers improve the security of their systems Therefore, he/she wants to migrate the system to Alibaba Cloud. Which of the following functions should the administrator activate in Alibaba Cloud to reduce the possibility of brute force password cracking?
- A. Anti-DDoS Origin Basic Edition
- B. CloudMonitor
- C. Security Center
- D. Cloud Firewall
Answer: D
Explanation:
Explanation
Cloud Firewall is a service that provides centralized protection for your cloud assets and prevents unauthorized access to your servers. Cloud Firewall can monitor and control the inbound and outbound traffic of your servers, and block malicious requests and attacks. Cloud Firewall can also detect and prevent brute force password cracking attempts by using intelligent algorithms and threat intelligence. Therefore, option A is the correct answer. References: What is Cloud Firewall?, Protect servers from brute force attacks
NEW QUESTION # 53
You have created two Alibaba Cloud VPCs in two different regions To establish communication between these two VPCs via the Intranet, you can________.
- A. Use CEN to establish communication between VPCs
- B. Create a new access rule through the Security Group to enable the communication
- C. No operation is needed, as VPCs under the same account are connected through the Intranet by default
- D. Use the VRouter to create a new route table to enable the communication
Answer: A
Explanation:
Explanation
CEN is a service that allows you to create a global network for rapidly building a distributed business system with a hybrid cloud computing solution. CEN enables you to build a secure, private, and enterprise-class interconnected network between VPCs in different regions and your local data centers1. CEN uses transit routers deployed in different regions to build a full-mesh network on top of the Alibaba Cloud global transmission network. CEN enables global network communication: The two transit routers can be connected through multiple highly available and highly reliable lines2. To establish communication between two VPCs in different regions via the intranet, you can use CEN to attach the VPCs to the transit routers in their respective regions, and then create a bandwidth plan to allocate bandwidth resources for inter-region connections3. This way, you can avoid the complexity and cost of setting up VPN or Express Connect connections between the VPCs, and enjoy the benefits of CEN, such as large-scale and on-demand networking, simplified network topology, flexible management, globally connected network, shortest-path algorithm, high redundancy, automatic route learning and advertisement, and bandwidth sharing and management2. References: Introduce Cloud Enterprise Network CEN and how ... - Alibaba Cloud Academy, Cloud Enterprise Network (CEN) - Alibaba Cloud, Attach a network instance to a CEN instance - Cloud Enterprise Network - Alibaba Cloud
NEW QUESTION # 54
Which of the following statements is NOT correct, when comparing RDS with a self-built database?
- A. Self-built database support quick deployment and elastic scaling.
- B. RDS provides automatic backup while self-built databases require you to prepare storage space for backup copies and regularly verify that these copies can be restored.
- C. RDS requires no O&M while self-built database require a dedicated DBA for maintenance, which results in high HR costs.
- D. RDS features a high availability of 99 95% while self-built databases require you to implement data protection primary-standby replication, and RAID all by yourself.
Answer: A
NEW QUESTION # 55
Object Storage Service (OSS) supports access logging. A bucket owner can activate access logging for their buckets in the OSS management console. When access logging is activated for bucket A, OSS automatically accesses the request logs for this bucket (in hours) and generates and writes an object to the user-specified bucket B according to certain naming rules. Which of the following
statements is true for OSS logging?
- A. Buckets A and B must be different buckets.
- B. Buckets A and B must be the same bucket.
- C. Buckets A and B can belong to different users.
- D. Buckets A and B can be separate buckets (or a single bucket) but they must belong to the same user
Answer: D
NEW QUESTION # 56
......
ACP-Cloud1 Exam Dumps Pass with Updated 2025 Certified Exam Questions: https://www.passleadervce.com/Alibaba-Cloud-Computing/reliable-ACP-Cloud1-exam-learning-guide.html
ACP-Cloud1 Exam Questions - Real & Updated Questions PDF: https://drive.google.com/open?id=13h0F_I99GqnQM0tDpzi3x6FuDfbk6wcq