I85PREP
⌘ K
Alibaba ACA Cloud Business study materials
Alibaba ACA Cloud Business study resources

Alibaba ACA Cloud Business practice questions

One question at a time. Build your Alibaba ACA Cloud Business understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Alibaba Cloud Products and Services

Which Alibaba Cloud service is a fully managed relational database compatible with MySQL, SQL Server, and PostgreSQL engines?

  1. Alibaba Cloud CDN
  2. Object Storage Service (OSS)
  3. ApsaraDB RDS Correct answer.
  4. Server Load Balancer (SLB)

Explanation

ApsaraDB RDS is the managed relational database offering and supports multiple engines including MySQL, SQL Server, PostgreSQL, and MariaDB. The other services provide storage, traffic distribution, and content delivery rather than managed relational database engines.

Question 2Alibaba Cloud Products and Services

A company needs to store billions of unstructured image files with high durability and access them over HTTP. Which Alibaba Cloud product is designed for this?

  1. Elastic Compute Service (ECS)
  2. ApsaraDB for Redis
  3. Object Storage Service (OSS) Correct answer.
  4. Virtual Private Cloud (VPC)

Explanation

OSS is a massively scalable object storage service intended for unstructured data such as images, videos, and backups, accessible via HTTP/HTTPS APIs. Redis is an in-memory cache, ECS provides compute instances, and VPC provides network isolation.

Question 3Alibaba Cloud Products and Services

Which Alibaba Cloud service provides resizable virtual servers on which customers install and run their own operating systems and applications?

  1. Alibaba Cloud DNS
  2. Function Compute
  3. Elastic Compute Service (ECS) Correct answer.
  4. ApsaraDB RDS

Explanation

ECS delivers elastic virtual machines where the customer controls the OS and application stack. Function Compute is serverless event-driven execution, RDS is managed database, and DNS resolves domain names.

Question 4Alibaba Cloud Products and Services

What is the primary purpose of Alibaba Cloud's Virtual Private Cloud (VPC)?

  1. To provide a managed message queue for decoupling services
  2. To provision a logically isolated private network with user-defined subnets and routing Correct answer.
  3. To automatically scale application containers across regions
  4. To cache static content at edge locations worldwide

Explanation

A VPC creates a logically isolated network in which the customer defines IP ranges, subnets, route tables, and gateways. Autoscaling, messaging, and edge caching are handled by separate services.

Question 5Alibaba Cloud Products and Services

Which Alibaba Cloud service distributes incoming traffic across multiple ECS instances to improve availability and fault tolerance?

  1. CloudMonitor
  2. Server Load Balancer (SLB) Correct answer.
  3. Resource Access Management (RAM)
  4. Alibaba Cloud WAF

Explanation

SLB balances traffic across a pool of backend servers and health-checks them so unhealthy instances are removed. WAF filters web attacks, CloudMonitor observes metrics, and RAM governs identities and permissions.

Question 6Alibaba Cloud Products and Services

A team wants to run containerized microservices without provisioning or managing the underlying cluster nodes. Which Alibaba Cloud offering best fits?

  1. Elastic Compute Service with self-managed Docker
  2. Object Storage Service
  3. ApsaraDB RDS
  4. Serverless Kubernetes (ASK) Correct answer.

Explanation

Serverless Kubernetes (ASK) lets users run pods without managing worker nodes, since the infrastructure is abstracted away. Self-managed ECS with Docker still requires node operations, and RDS/OSS are not container platforms.

Question 7Alibaba Cloud Products and Services

Which Alibaba Cloud service is used to create and manage domain names and route end-user requests to the correct endpoint?

  1. Express Connect
  2. Alibaba Cloud DNS Correct answer.
  3. Smart Access Gateway
  4. Cloud Enterprise Network

Explanation

Alibaba Cloud DNS resolves domain names to IP addresses or other endpoints. The other options are networking products for enterprise connectivity and hybrid links.

Question 8Alibaba Cloud Products and Services

In Resource Access Management (RAM), what is the purpose of a role?

  1. To specify the billing currency for an Alibaba Cloud account
  2. To store long-term access keys for the root account
  3. To define the IP address range of a VPC subnet
  4. To grant temporary, assumable permissions to trusted entities without sharing long-term credentials Correct answer.

Explanation

A RAM role is assumed by trusted entities, which receive temporary security credentials scoped to the role's policy. This avoids distributing permanent access keys.

Question 9Alibaba Cloud Products and Services

An application experiences unpredictable traffic spikes and the team wants ECS capacity to grow and shrink automatically based on CPU utilization. Which service should be configured?

  1. Auto Scaling Correct answer.
  2. Server Load Balancer
  3. Alibaba Cloud CDN
  4. CloudMonitor alone

Explanation

Auto Scaling adjusts the number of ECS instances according to scaling rules and scheduled or metric-based triggers such as CPU utilization. CloudMonitor supplies metrics but does not itself change capacity.

Question 10Alibaba Cloud Products and Services

A workload runs only during business hours and must be stopped at night to reduce cost while retaining its disk data. Which ECS billing model is most appropriate?

  1. Pay-as-you-go with manual or scheduled stop Correct answer.
  2. Reserved instance purchased for three years
  3. Subscription with a multi-year commitment
  4. Dedicated host with annual prepayment

Explanation

Pay-as-you-go instances can be stopped when idle, and charges for compute generally cease while disks persist and continue to incur storage cost. Long-term commitments are economical only for continuous workloads.

Question 11Alibaba Cloud Products and Services

A company must keep database backups in a separate region and guarantee they remain readable even if the primary region is lost. Which OSS feature supports this?

  1. Lifecycle rules
  2. Static website hosting
  3. Cross-region replication Correct answer.
  4. Bucket tagging

Explanation

Cross-region replication asynchronously copies objects to a bucket in another region so data survives a regional failure. Tagging, website hosting, and lifecycle rules do not create remote copies.

Question 12Alibaba Cloud Products and Services

An application repeatedly reads the same small configuration records and needs sub-millisecond latency. Which Alibaba Cloud service is the best fit?

  1. ApsaraDB RDS for MySQL
  2. ApsaraDB for Redis Correct answer.
  3. Object Storage Service
  4. AnalyticDB for PostgreSQL

Explanation

ApsaraDB for Redis is an in-memory key-value store engineered for very low-latency reads of frequently accessed data. Disk-based RDS, object storage, and analytical warehouses are not optimized for sub-millisecond caching.

Question 13Alibaba Cloud Products and Services

A web application must be protected from SQL injection and cross-site scripting before traffic reaches the backend servers. Which Alibaba Cloud service addresses this?

  1. Cloud Firewall
  2. Web Application Firewall (WAF) Correct answer.
  3. Anti-DDoS Pro
  4. SSL Certificates

Explanation

WAF inspects HTTP/HTTPS requests and blocks application-layer attacks such as SQL injection and XSS. Anti-DDoS handles volumetric attacks, Cloud Firewall manages network-level access control, and SSL certificates provide encryption.

Question 14Alibaba Cloud Products and Services

A firm needs a dedicated private network connection between its on-premises data center and Alibaba Cloud with consistent bandwidth and lower latency than the public internet. Which product should it choose?

  1. VPN Gateway
  2. Smart Access Gateway
  3. Express Connect Correct answer.
  4. Global Accelerator

Explanation

Express Connect provides a dedicated physical private line between a customer site and Alibaba Cloud, offering predictable bandwidth and latency. VPN Gateway tunnels over the public internet, and the other options serve different connectivity needs.

Question 15Alibaba Cloud Products and Services

Which Alibaba Cloud service provides a managed, highly available message queue for decoupling producers and consumers in a distributed system?

  1. Log Service (SLS)
  2. Cloud Config
  3. Message Queue for Apache RocketMQ Correct answer.
  4. DataWorks

Explanation

Message Queue for Apache RocketMQ is a managed messaging service that buffers messages between producers and consumers, enabling asynchronous decoupling. Log Service handles log data, DataWorks orchestrates data integration, and Cloud Config tracks resource configuration.

Question 16Alibaba Cloud Products and Services

A data team needs a petabyte-scale, columnar data warehouse for interactive BI queries over large datasets. Which Alibaba Cloud product is designed for this?

  1. AnalyticDB Correct answer.
  2. Table Store (Tablestore)
  3. ApsaraDB RDS for PostgreSQL
  4. ApsaraDB for Memcache

Explanation

AnalyticDB is a massively parallel, columnar analytical database built for large-scale interactive BI and reporting queries. RDS is transactional, Memcache is a cache, and Tablestore is a NoSQL table store.

Question 17Alibaba Cloud Products and Services

A company wants to run an event-driven function that executes only when an OSS object is uploaded, without managing any servers. Which service should be used?

  1. Server Load Balancer
  2. Elastic Container Instance
  3. Function Compute Correct answer.
  4. ApsaraDB RDS

Explanation

Function Compute is a serverless platform that runs code in response to events such as OSS object-created triggers. It scales automatically and bills per invocation and execution time.

Question 18Alibaba Cloud Products and Services

Which Alibaba Cloud service centrally collects metrics, sets alarms, and provides dashboards for ECS and RDS resources?

  1. ActionTrail
  2. Resource Orchestration Service
  3. Cloud Config
  4. CloudMonitor Correct answer.

Explanation

CloudMonitor gathers metrics from Alibaba Cloud resources, supports alarm rules, and presents dashboards. ActionTrail records API activity, ROS templates infrastructure, and Cloud Config tracks configuration compliance.

Question 19Alibaba Cloud Products and Services

An administrator must ensure that only approved API actions are recorded for compliance auditing of all account activity. Which service provides this audit trail?

  1. Security Center
  2. CloudMonitor
  3. ActionTrail Correct answer.
  4. RAM

Explanation

ActionTrail records API calls made in the account, capturing who did what and when, which supports compliance auditing. RAM controls permissions, CloudMonitor tracks metrics, and Security Center manages threat detection.

Question 20Alibaba Cloud Products and Services

A customer needs to move large volumes of on-premises data to Alibaba Cloud OSS with limited internet bandwidth. Which service is purpose-built for offline bulk transfer?

  1. Express Connect
  2. Cloud Enterprise Network
  3. Data Transport (DataTrans) Correct answer.
  4. Global Accelerator

Explanation

Data Transport uses physical devices to ship large datasets to Alibaba Cloud when network transfer is impractical. The other services improve network connectivity but do not provide offline bulk migration.

Question 21Alibaba Cloud Products and Services

An application must write to a relational database and publish a message such that both operations succeed or both fail together. Which Alibaba Cloud capability best supports this requirement?

  1. A scheduled Auto Scaling rule
  2. Message Queue transactions combined with a local database transaction Correct answer.
  3. OSS lifecycle rules
  4. SLB health checks

Explanation

Transactional messages in Message Queue let the producer commit a local database transaction and then confirm the message, so the two are coordinated. Scaling rules, lifecycle rules, and health checks do not provide distributed transaction semantics.

Question 22Alibaba Cloud Products and Services

A team wants to enforce that no OSS bucket in the account can be created as public-read. Which Alibaba Cloud mechanism is most appropriate?

  1. An OSS lifecycle rule
  2. A CloudMonitor alarm on bucket count
  3. A RAM permission policy or organization-level guardrail restricting public bucket creation Correct answer.
  4. An SLB access control list

Explanation

Preventive controls are implemented through RAM policies and organization guardrails that deny the relevant actions, keeping buckets private by default. Lifecycle rules, load balancer ACLs, and metric alarms do not prevent the action.

Question 23Alibaba Cloud Products and Services

A globally distributed application needs to serve static assets to users with low latency while keeping the origin bucket private. Which combination achieves this?

  1. Alibaba Cloud CDN with an OSS private bucket and origin authentication Correct answer.
  2. VPC peering between two regions
  3. SLB with a single ECS instance
  4. ApsaraDB RDS with read replicas

Explanation

CDN caches static content at edge nodes close to users, and origin authentication (such as private bucket access with signed URLs) keeps the OSS bucket from being publicly readable. The other options do not combine edge caching with private-origin protection.

Question 24Alibaba Cloud Products and Services

An application running on ECS needs to access an OSS bucket without embedding long-term AccessKey secrets in code. Which approach is the recommended practice?

  1. Assign a RAM role to the ECS instance and use temporary credentials from the instance metadata service Correct answer.
  2. Hard-code the root account AccessKey in the application configuration
  3. Disable RAM and use the root account for all API calls
  4. Share a RAM user AccessKey across all team members

Explanation

Attaching a RAM role to an ECS instance lets the application obtain rotating temporary credentials from the instance metadata service, avoiding embedded secrets. Long-term or shared keys and root account use increase exposure and violate least privilege.

Question 25Alibaba Cloud Products and Services

A company wants to define its entire multi-tier environment (VPC, ECS, SLB, RDS) as reusable code and redeploy it identically in another region. Which Alibaba Cloud service fits best?

  1. CloudMonitor
  2. Alibaba Cloud DNS
  3. Resource Orchestration Service (ROS) Correct answer.
  4. ActionTrail

Explanation

ROS uses templates to declare infrastructure resources and can provision the same stack repeatedly across regions. Monitoring, auditing, and DNS services do not template and deploy infrastructure.

Question 26Alibaba Cloud Products and Services

Which Alibaba Cloud service provides managed relational databases such as MySQL, SQL Server, and PostgreSQL with automated backup and scaling?

  1. ApsaraDB for RDS Correct answer.
  2. Server Load Balancer (SLB)
  3. Object Storage Service (OSS)
  4. Alibaba Cloud CDN

Explanation

ApsaraDB for RDS is the managed relational database service that supports engines like MySQL, SQL Server, PostgreSQL, and MariaDB with automated backups and high availability. OSS is object storage, SLB distributes traffic, and CDN caches content at the edge.

Question 27Alibaba Cloud Products and Services

Which Alibaba Cloud service offers a fully managed, serverless NoSQL database that supports key-value and wide-column data models and scales automatically?

  1. AnalyticDB
  2. Table Store (Tablestore) Correct answer.
  3. ApsaraDB for Redis
  4. PolarDB

Explanation

Table Store (Tablestore) is a fully managed NoSQL service for structured data with wide-column and key-value models that scales automatically. Redis is an in-memory cache, AnalyticDB is an analytical data warehouse, and PolarDB is a relational database.

Question 28Alibaba Cloud Products and Services

A team needs to store and retrieve large unstructured files such as images and videos with high durability and virtually unlimited capacity. Which Alibaba Cloud service fits this need?

  1. Elastic Compute Service (ECS)
  2. Server Load Balancer (SLB)
  3. Object Storage Service (OSS) Correct answer.
  4. ApsaraDB for RDS

Explanation

OSS is designed for storing and retrieving any amount of unstructured data such as images, videos, and backups with high durability. RDS is relational data, ECS provides virtual machines, and SLB distributes traffic.

Question 29Alibaba Cloud Products and Services

Which Alibaba Cloud service provides virtual machines that can be configured with CPU, memory, and operating systems and are the foundational compute resource in the cloud?

  1. Function Compute
  2. Container Service for Kubernetes (ACK)
  3. ApsaraDB for RDS
  4. Elastic Compute Service (ECS) Correct answer.

Explanation

ECS provides resizable virtual machines with configurable CPU, memory, and OS images and is the core compute service. Function Compute is serverless, ACK manages containers, and RDS is managed database.

Question 30Alibaba Cloud Products and Services

A company wants to distribute incoming HTTP traffic across multiple backend ECS instances to improve availability. Which Alibaba Cloud service should be used?

  1. VPN Gateway
  2. NAT Gateway
  3. Cloud Enterprise Network (CEN)
  4. Server Load Balancer (SLB) Correct answer.

Explanation

SLB distributes incoming traffic across multiple backend servers to improve availability and fault tolerance. NAT Gateway provides outbound internet access, VPN Gateway establishes encrypted tunnels, and CEN connects networks.

Question 31Alibaba Cloud Products and Services

Which Alibaba Cloud service provides a virtual private network environment in which a user can define subnets, route tables, and security groups for isolating cloud resources?

  1. Virtual Private Cloud (VPC) Correct answer.
  2. Express Connect
  3. Cloud Enterprise Network (CEN)
  4. Resource Access Management (RAM)

Explanation

VPC provides an isolated virtual network where users define subnets, route tables, and security groups. CEN interconnects networks, Express Connect provides dedicated physical connections, and RAM manages identity and permissions.

Question 32Alibaba Cloud Products and Services

Which Alibaba Cloud service allows an administrator to create users, groups, and policies to control who can perform which actions on cloud resources?

  1. Resource Access Management (RAM) Correct answer.
  2. Cloud Config
  3. Security Center
  4. ActionTrail

Explanation

RAM is the identity and access management service for creating users, groups, and policies that define permissions on resources. Security Center is threat detection, ActionTrail records API calls, and Cloud Config tracks resource configuration.

Question 33Alibaba Cloud Products and Services

Which Alibaba Cloud service provides a global content delivery network that caches content at edge nodes close to end users?

  1. Global Accelerator
  2. Alibaba Cloud CDN Correct answer.
  3. Server Load Balancer (SLB)
  4. Smart Access Gateway

Explanation

Alibaba Cloud CDN caches content at globally distributed edge nodes to reduce latency for end users. Global Accelerator optimizes network paths, Smart Access Gateway connects branch offices, and SLB balances traffic among backend servers.

Question 34Alibaba Cloud Products and Services

A team wants to run batch jobs and web applications on managed compute without manually patching the underlying operating system. Which Alibaba Cloud offering best satisfies this requirement?

  1. Elastic Container Instance (ECI) Correct answer.
  2. Elastic Compute Service with custom images
  3. Bare Metal Server
  4. Dedicated Host

Explanation

ECI runs containers without requiring users to manage or patch the underlying nodes, making it suitable for workloads where the OS should be abstracted. Bare Metal, custom ECS images, and Dedicated Host all leave OS management with the customer.

Question 35Alibaba Cloud Products and Services

Which Alibaba Cloud service is a managed Kubernetes platform that handles control plane operations and worker node lifecycle for containerized applications?

  1. Container Registry
  2. Elastic Container Instance (ECI)
  3. Function Compute
  4. Container Service for Kubernetes (ACK) Correct answer.

Explanation

ACK is a managed Kubernetes service that handles control plane availability and simplifies worker node management. ECI runs individual containers, Container Registry stores images, and Function Compute is serverless functions.

Question 36Alibaba Cloud Products and Services

A company needs to store container images privately and pull them securely during deployments. Which Alibaba Cloud service should it use?

  1. Container Registry (ACR) Correct answer.
  2. Cloud Backup
  3. Log Service (SLS)
  4. Object Storage Service (OSS)

Explanation

Container Registry (ACR) is a managed service for storing, managing, and distributing container images with access control. OSS is general object storage, Cloud Backup handles backups, and SLS collects logs.

Question 37Alibaba Cloud Products and Services

An application needs a managed message queue that supports ordered delivery and exactly-once processing for financial transactions. Which Alibaba Cloud service is designed for this?

  1. EventBridge
  2. Message Service (MNS)
  3. Data Transmission Service (DTS)
  4. Message Queue for Apache RocketMQ Correct answer.

Explanation

Message Queue for Apache RocketMQ supports ordered messages and exactly-once semantics suited to transactional workloads. MNS is simpler messaging, EventBridge routes events, and DTS migrates data between databases.

Question 38Alibaba Cloud Products and Services

A company wants to run periodic scripts on a schedule without maintaining servers. Which Alibaba Cloud service is most appropriate?

  1. Function Compute with a timer trigger Correct answer.
  2. Elastic Compute Service (ECS)
  3. Server Load Balancer (SLB)
  4. ApsaraDB for RDS

Explanation

Function Compute supports timer triggers that invoke code on a schedule without provisioning servers. ECS requires managing instances, SLB balances traffic, and RDS is a database.

Question 39Alibaba Cloud Products and Services

Which Alibaba Cloud service provides real-time collection, querying, and analysis of machine logs from ECS and other sources?

  1. ActionTrail
  2. Cloud Config
  3. Log Service (SLS) Correct answer.
  4. CloudMonitor

Explanation

Log Service (SLS) collects, stores, and analyzes machine and application logs in real time. ActionTrail records API activity, CloudMonitor tracks metrics and alarms, and Cloud Config tracks resource configuration.

Question 40Alibaba Cloud Products and Services

A security team wants centralized visibility into vulnerabilities, baseline risks, and anomalous behavior across ECS instances. Which Alibaba Cloud service should it enable?

  1. Web Application Firewall (WAF)
  2. Security Center Correct answer.
  3. Key Management Service (KMS)
  4. Anti-DDoS Pro

Explanation

Security Center provides host-based threat detection, vulnerability scanning, and baseline checks across cloud assets. WAF protects web applications, Anti-DDoS mitigates volumetric attacks, and KMS manages encryption keys.

Question 41Alibaba Cloud Products and Services

An organization must encrypt data at rest in OSS using customer-managed keys and control key rotation centrally. Which Alibaba Cloud service provides this capability?

  1. Resource Access Management (RAM)
  2. Security Center
  3. Key Management Service (KMS) Correct answer.
  4. SSL Certificates

Explanation

KMS creates and manages encryption keys, supports key rotation, and integrates with services like OSS for server-side encryption. Security Center is threat detection, RAM manages permissions, and SSL Certificates secure transport.

Question 42Alibaba Cloud Products and Services

A company wants to connect multiple VPCs across regions and on-premises networks into a single private network with automatic routing. Which Alibaba Cloud service should it use?

  1. Express Connect
  2. VPN Gateway
  3. Cloud Enterprise Network (CEN) Correct answer.
  4. NAT Gateway

Explanation

CEN interconnects VPCs and on-premises networks across regions into one private network with automatic route distribution. VPN Gateway creates encrypted tunnels, Express Connect provides dedicated links, and NAT Gateway provides outbound access.

Question 43Alibaba Cloud Products and Services

Which Alibaba Cloud service allows an organization to query and analyze historical API calls made in its account for security investigation?

  1. ActionTrail Correct answer.
  2. Log Service (SLS)
  3. CloudMonitor
  4. Resource Access Management (RAM)

Explanation

ActionTrail records API activity and lets administrators query historical calls for auditing and investigation. CloudMonitor tracks metrics, SLS analyzes logs, and RAM manages permissions.

Question 44Alibaba Cloud Products and Services

A team needs a managed data warehouse optimized for large-scale online analytical processing with columnar storage. Which Alibaba Cloud product is designed for this?

  1. PolarDB
  2. Table Store (Tablestore)
  3. AnalyticDB Correct answer.
  4. ApsaraDB for RDS

Explanation

AnalyticDB is a managed analytical database with columnar storage optimized for large-scale OLAP queries. RDS and PolarDB are transactional relational databases, and Tablestore is a NoSQL store.

Question 45Alibaba Cloud Products and Services

A company must migrate an on-premises MySQL database to Alibaba Cloud RDS with minimal downtime and continuous replication during cutover. Which service should it use?

  1. Cloud Backup
  2. Data Transmission Service (DTS) Correct answer.
  3. Server Migration Center (SMC)
  4. OSS Import Service

Explanation

DTS supports schema migration plus continuous data replication, enabling minimal-downtime cutover between databases. Cloud Backup handles backups, OSS Import moves objects, and SMC migrates servers.

Question 46Alibaba Cloud Products and Services

An architect must design a solution where an application on ECS accesses an RDS instance without exposing the database to the public internet. Which configuration achieves this?

  1. Place ECS and RDS in the same VPC and use the internal endpoint with security group rules Correct answer.
  2. Enable RDS public endpoint and rely on SSL encryption only
  3. Assign a public IP to RDS and restrict access with a whitelist
  4. Route RDS traffic through Alibaba Cloud CDN

Explanation

Placing both resources in the same VPC and using the internal endpoint keeps database traffic private, with security groups further restricting access. Public endpoints or whitelist-only controls still expose the database to the internet.

Question 47Alibaba Cloud Products and Services

A company needs a shared file system that multiple ECS instances can mount simultaneously for a content management application. Which Alibaba Cloud storage service is appropriate?

  1. Table Store (Tablestore)
  2. Object Storage Service (OSS)
  3. Apsara File Storage NAS Correct answer.
  4. Elastic Block Storage (EBS)

Explanation

Apsara File Storage NAS provides a shared POSIX file system that many ECS instances can mount at once. OSS is object storage via HTTP APIs, EBS is block storage attached to a single instance, and Tablestore is NoSQL.

Question 48Alibaba Cloud Products and Services

An organization wants to enforce that all ECS disks are encrypted and receive alerts when a noncompliant resource appears. Which Alibaba Cloud service provides this rule-based compliance evaluation?

  1. Cloud Config Correct answer.
  2. Security Center
  3. ActionTrail
  4. Resource Access Management (RAM)

Explanation

Cloud Config evaluates resource configurations against rules and can trigger alerts or remediation for noncompliance. ActionTrail audits API calls, Security Center detects threats, and RAM manages permissions.

Question 49Alibaba Cloud Products and Services

A company needs to run a stateful database workload on dedicated physical hardware for licensing and isolation reasons while still using cloud automation. Which Alibaba Cloud offering fits best?

  1. Dedicated Host Correct answer.
  2. Server Load Balancer (SLB)
  3. Elastic Container Instance (ECI)
  4. Function Compute

Explanation

Dedicated Host provides exclusive physical hosts that support bring-your-own-license scenarios and hardware isolation. ECI runs containers, Function Compute runs serverless functions, and SLB balances traffic.

Question 50Alibaba Cloud Products and Services

A media company wants to reduce origin load and cost for video delivery by caching popular content at edge locations while serving users worldwide. Which Alibaba Cloud combination best achieves this?

  1. ECS with a public IP only
  2. RDS with read replicas
  3. SLB with a single backend ECS
  4. OSS as origin with Alibaba Cloud CDN in front Correct answer.

Explanation

Using OSS as the origin with CDN caching at edge nodes reduces origin requests and latency for global users. A public ECS, RDS replicas, or a single-backend SLB do not provide edge caching.