Alibaba ACP Cloud Computing study plan

Map each Alibaba Cloud product family (compute, network, storage, database, security) to the shared-responsibility model and identify which layers the customer owns

Explain the region/zone/edge-node hierarchy and predict how a given deployment topology affects latency and failure isolation

Provision an ECS instance from scratch, choosing instance family, image, and disk type for a stated workload profile

Distinguish the ECS instance families (general purpose, compute-optimized, memory-optimized, GPU, shared vs. dedicated) and justify a selection for three sample workloads

Configure security groups and key pairs to expose only the ports a web tier requires, then verify with connectivity tests

Attach and mount a data disk, then resize the file system online without downtime

Create and apply a custom image, then use it to launch a replacement instance

Write and execute a user-data script that bootstraps a web server on first boot

Diagnose and resolve an ECS instance that fails to reach the internet

Design a VPC with multiple vSwitches across two zones and allocate non-overlapping CIDR blocks

Configure route tables and NAT Gateway so private-subnet instances reach the internet without public IPs

Deploy a Server Load Balancer across two backend ECS instances and verify health-check failover by stopping one backend

Associate an EIP and bind a DNS record to it, then confirm resolution and failover behavior

Create an OSS bucket, apply a bucket policy and ACL, and demonstrate access working and failing as intended

Configure lifecycle rules to transition objects to a colder storage class and expire them on a schedule

Mount a NAS file system on two ECS instances simultaneously and confirm shared read/write consistency

Select the right block-storage type (ESSD, SSD, ultra disk) for a given IOPS and latency requirement

Provision an RDS instance, connect from an ECS instance in the same VPC, and verify that access from outside the whitelist is refused

Configure a read-only RDS instance or read/write splitting and confirm read traffic lands on the replica

Create a RAM user, attach a least-privilege custom policy, and prove the user can do the allowed action and is denied the disallowed one

Enable Security Center baselines and interpret one high-severity finding

Deploy WAF in front of a web application and block a simulated injection or scan attempt

Compare Anti-DDoS Basic against Anti-DDoS Pro and state the protection threshold and escalation path for a given scenario

Create a scaling group with a scheduled policy and a metric-based policy, then trigger a scale-out and confirm new instances join the SLB backend pool

Configure a lifecycle hook or cooldown and explain how it prevents flapping

Set up CloudMonitor alarms on CPU, disk, and SLB unhealthy backends, and route alerts to a notification contact

Trace a simulated latency incident across ECS, SLB, and RDS using available metrics and logs

Estimate the monthly cost of a reference three-tier architecture and identify the three largest cost drivers

Apply a cost-reduction change (reserved instance, savings plan, or right-sizing) and quantify the projected savings

Re-answer missed practice questions by domain and close every gap scoring below 80 percent

Rebuild the full reference architecture end to end from a blank account without consulting notes

Explain aloud the tradeoffs behind each major design decision in the rebuilt architecture

Complete two timed full-length practice exams and review every incorrect answer