Alibaba CSA-C01 study guide
Alibaba CSA-C01 · Work through your exam, one topic at a time.
The Alibaba Cloud Certified Associate (ACA) Cloud Computing credential is an entry-level certification for people who want to demonstrate foundational fluency with Alibaba Cloud services and cloud concepts. It suits developers, system administrators, pre-sales and solutions staff, and IT generalists who are starting to build or operate workloads on Alibaba Cloud, as well as students preparing for cloud-focused roles. The Alibaba CSA-C01 study guide has 8 sections and about 2,817 words.
01Cloud Computing Fundamentals and Alibaba Cloud Overview
Alibaba Cloud's global infrastructure is organized as Regions (geographic areas) containing Zones (isolated datacenters with independent power and network). A region is selected for latency, data-residency, and service availability; zones are selected for high availability within a region.
351 words, about 2 min02Elastic Compute Service (ECS)
ECS instances are defined by instance family (general, compute-optimized, memory-optimized, GPU), vCPU/memory ratio , image (public, custom, shared, marketplace), system disk and data disks , and network type (VPC only in modern designs). Security groups are stateful virtual firewalls attached to instances; key pairs replace passwords for SSH and are region-scoped.
339 words, about 2 min03Networking: VPC, SLB, DNS, CDN
A VPC is an isolated virtual network with a CIDR block, subdivided into vSwitches (subnets) bound to a single zone. Route tables direct traffic; NAT Gateway gives private instances outbound internet without inbound exposure; EIP provides a public IP.
319 words, about 2 min04Storage and Database Services
Storage tiers: OSS (object, buckets, storage classes such as Standard/IA/Archive, lifecycle rules, versioning), NAS (shared POSIX file system for multiple instances), and cloud disks (block storage: ESSD, SSD, efficient). Snapshots back up disks; OSS lifecycle transitions or expires objects automatically.
315 words, about 2 min05Security
Layered security: network (security groups, network ACLs, WAF, Anti-DDoS), host (patch management, antivirus, baseline checks via Security Center), data (encryption at rest with KMS, TLS in transit, OSS bucket policies), and identity (RAM). Security Center provides threat detection and vulnerability assessment.
277 words, about 1 min06Identity and Access Management (RAM)
RAM manages identities and permissions. Users are long-term identities (people or apps) with credentials; groups bundle users for policy attachment; roles are assumable identities without permanent credentials, used for cross-account access and service delegation (e.g., ECS instances assuming a role via instance metadata).
318 words, about 2 min07Monitoring, Operations and Management
CloudMonitor collects metrics (CPU, memory via agent, disk, network), supports alarms with notification contacts, and integrates with Auto Scaling. ActionTrail records control-plane API calls for audit and compliance.
280 words, about 1 min08Billing, Support and Service Usage
Billing models: pay-as-you-go (hourly/usage, flexible), subscription (prepaid term, discounted), savings plans/reserved capacity for steady workloads, and spot/preemptible instances for fault-tolerant batch work. Costs accrue from compute, storage, network egress, and requests.
618 words, about 3 min