Alibaba CSA-C01 flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Region

A geographic area containing one or more isolated zones; chosen for latency, data residency, and service availability. Not all products exist in every region.

Availability Zone

An isolated data center with independent power and network inside a region. Multi-zone deployment protects against single data-center failure.

Shared Responsibility Model

Alibaba Cloud secures physical infrastructure and virtualization; customers secure guest OS, applications, data, and RAM permissions.

IaaS PaaS SaaS

IaaS provides compute, storage, and networking; PaaS provides managed runtimes and middleware; SaaS provides finished applications to end users.

ECS Instance Family

Families like general purpose (g), compute optimized (c), memory optimized (r), and GPU differ in vCPU-to-memory ratio for different workloads.

ECS Billing Modes

Subscription is prepaid and cheapest for steady workloads; Pay-As-You-Go is postpaid; Spot is low cost but can be reclaimed.

Security Group

A stateful virtual firewall attached to ECS instances with allow-only rules; separate inbound and outbound rule sets apply.

ECS Custom Image

A captured OS and software configuration used to provision identical instances repeatably; can be shared across accounts.

Auto Scaling

Automatically adjusts ECS instance count based on scaling rules and CloudMonitor metrics so capacity matches demand.

VPC

An isolated virtual network with a user-defined private CIDR block; subnets divide it, and resources inside communicate privately by default.

VSwitch

A subnet resource bound to a single zone inside a VPC; instances in different VSwitches of one VPC can communicate privately.

NAT Gateway

Lets instances in a private subnet reach the internet without public IPs; an Internet NAT Gateway handles outbound traffic.

SLB

Server Load Balancer distributes traffic across backend servers; CLB, ALB, and NLB target different protocol layers.

Elastic IP

A public IP address that can be detached and re-attached to different instances; bandwidth is billed separately.

CDN

Caches content at edge nodes near users; cache expiration and refresh rules control freshness and origin pull behavior.

OSS Storage Classes

Standard, Infrequent Access, and Archive classes offer decreasing cost and increasing retrieval latency; lifecycle rules automate transitions.

NAS

Network Attached Storage provides shared file-level storage mountable concurrently by multiple ECS instances, suited to shared workloads.

ApsaraDB RDS

A managed relational database for MySQL, SQL Server, PostgreSQL, or MariaDB with automatic backup, failover, and read-only instances.

PolarDB

A cloud-native database with compute-storage separation and read replicas, compatible with MySQL and PostgreSQL for high performance.

ApsaraDB for Redis

A managed in-memory cache delivering high-throughput, low-latency access; commonly placed in front of databases to reduce load.

Anti-DDoS

Anti-DDoS Basic is included by default; Pro and Premium tiers provide higher mitigation capacity for public-facing services.

WAF

Web Application Firewall protects HTTP/HTTPS applications against SQL injection, XSS, and other OWASP-class attacks.

Security Center

Provides host-based threat detection, vulnerability scanning, and baseline checks across ECS and other cloud resources.

ActionTrail

Records API activity across the account for auditing and compliance; logs can be delivered to OSS or Log Service.

RAM Policy Structure

A JSON document with Effect, Action, Resource, and Condition fields; Deny always overrides Allow when both match.

RAM Role

An identity assumed by trusted entities such as users, services, or federated identities, granting temporary permissions.

STS

Security Token Service issues temporary credentials for RAM roles, enabling short-lived access without long-term AccessKeys.

AccessKey

An AccessKeyId and AccessKeySecret pair authenticates API and CLI calls; rotate regularly and never embed in code.

CloudMonitor Alarm

Triggers notifications or actions such as Auto Scaling when a metric crosses a threshold for a defined period.

Log Service

Ingests, queries, and analyzes logs in real time, supporting alerting and dashboards for operational visibility.

ROS

Resource Orchestration Service provisions infrastructure as code via templates, enabling repeatable and versioned deployments.

Support Plans

Basic is free; Developer, Business, and Enterprise tiers offer progressively faster response times and more channels.