I85PREP
⌘ K
HCIA-Cloud Service study materials
HCIA-Cloud Service study resources

HCIA-Cloud Service practice questions

One question at a time. Build your HCIA-Cloud Service understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Huawei Cloud fundamentals and cloud service overview

On Huawei Cloud, which service is the foundational Infrastructure-as-a-Service layer that provides configurable virtual machines with selectable CPU, memory, and image options?

  1. Object Storage Service (OBS)
  2. Elastic Cloud Server (ECS) Correct answer.
  3. Cloud Eye (CES)
  4. Virtual Private Cloud (VPC)

Explanation

Elastic Cloud Server is the core IaaS compute service on Huawei Cloud, letting users create virtual machines by choosing flavors, images, disks, and networks. It provides raw compute capacity on which workloads and higher-level services run, unlike storage, networking, or monitoring services.

Question 2Huawei Cloud fundamentals and cloud service overview

A team needs to store large, unstructured files such as backups and media with virtually unlimited capacity, accessed over HTTP/HTTPS by key. Which Huawei Cloud service fits best?

  1. SFS
  2. RDS
  3. OBS Correct answer.
  4. EVS

Explanation

Object Storage Service stores data as objects in buckets and is designed for massive scale, unstructured content, and HTTP-based access. It is the natural choice for backups and media where capacity is effectively unbounded.

Question 3Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service provides an isolated, logically separated virtual network in which subnets, security groups, and route tables are defined?

  1. NAT Gateway
  2. Direct Connect
  3. ELB
  4. VPC Correct answer.

Explanation

Virtual Private Cloud creates an isolated virtual network where you define IP address ranges, subnets, security groups, and routing. Other connectivity services build on or connect to this network rather than defining it.

Question 4Huawei Cloud fundamentals and cloud service overview

What is the primary purpose of an Elastic IP address on Huawei Cloud?

  1. To encrypt traffic between two VPCs
  2. To reserve a block of IP addresses for a subnet
  3. To provide a public, static IP that can be bound to or unbound from cloud resources Correct answer.
  4. To assign a private IP that only internal subnets can reach

Explanation

An Elastic IP is a public IP address that can be dynamically associated with or detached from resources such as ECS or NAT gateways. It gives a resource stable internet-facing reachability without exposing its private address.

Question 5Huawei Cloud fundamentals and cloud service overview

Which statement best describes the Huawei Cloud shared responsibility model?

  1. Security responsibility transfers entirely to the customer once a service is provisioned
  2. The customer is responsible for the physical security of data centers
  3. Huawei Cloud is responsible for all security, including customer data and access keys
  4. Huawei Cloud secures the platform infrastructure while customers secure their own data, configurations, and access Correct answer.

Explanation

Under the shared responsibility model, Huawei Cloud secures the underlying cloud infrastructure, while customers remain responsible for their data, identity and access management, and service configurations. Responsibility is divided rather than owned by one party.

Question 6Huawei Cloud fundamentals and cloud service overview

A company wants a managed relational database so it can avoid patching and backing up database servers manually. Which Huawei Cloud service should it use?

  1. OBS
  2. RDS Correct answer.
  3. DCS
  4. GaussDB(for MySQL) only for analytics

Explanation

Relational Database Service is the managed offering that handles provisioning, patching, backups, and high availability for relational engines. It removes the operational burden of running database servers yourself.

Question 7Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service distributes incoming traffic across multiple backend servers to improve availability and scalability?

  1. ELB Correct answer.
  2. IMS
  3. EIP
  4. VPC

Explanation

Elastic Load Balance receives client requests and forwards them across a pool of backend servers, improving availability and allowing horizontal scaling. It is the standard traffic distribution service.

Question 8Huawei Cloud fundamentals and cloud service overview

What does the Huawei Cloud region and availability zone (AZ) design primarily provide?

  1. Geographic separation so that a failure in one zone does not necessarily affect another Correct answer.
  2. A guarantee that all services are free within a region
  3. Automatic translation of applications between languages
  4. Lower storage cost by compressing data

Explanation

Regions are geographic areas and availability zones are isolated locations within a region with independent power and network. Deploying across AZs improves fault tolerance because a failure in one zone need not affect the others.

Question 9Huawei Cloud fundamentals and cloud service overview

An administrator wants to define inbound and outbound rules that filter traffic at the instance level for ECS resources. Which VPC feature is used?

  1. Security group Correct answer.
  2. Route table
  3. Bandwidth package
  4. Peering connection

Explanation

Security groups act as instance-level virtual firewalls, evaluating allow rules for inbound and outbound traffic to associated resources. Route tables direct traffic, while peering and bandwidth handle connectivity and throughput.

Question 10Huawei Cloud fundamentals and cloud service overview

A workload must survive the loss of an entire availability zone. Which deployment approach best meets this requirement on Huawei Cloud?

  1. Store all data on one EVS volume attached to one server
  2. Deploy all ECS instances in one AZ with a single ELB
  3. Use a single ECS with a larger flavor
  4. Place instances across multiple AZs in the same region behind an ELB Correct answer.

Explanation

Spreading instances across multiple AZs in a region means an AZ failure does not remove all capacity, and an ELB can route around failed backends. This is the standard high-availability pattern for zone-level fault tolerance.

Question 11Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service lets private ECS instances without public IPs initiate outbound internet connections while remaining unreachable from the internet?

  1. NAT Gateway Correct answer.
  2. VPC peering
  3. ELB
  4. Direct Connect

Explanation

NAT Gateway performs source network address translation so instances in private subnets can reach the internet outbound while no inbound connections are initiated from outside. This preserves the private posture of those instances.

Question 12Huawei Cloud fundamentals and cloud service overview

A developer needs temporary, high-performance block storage for a database running on an ECS instance. Which Huawei Cloud storage type is appropriate?

  1. SFS file system
  2. CDN cache
  3. OBS bucket
  4. EVS volume Correct answer.

Explanation

Elastic Volume Service provides block storage volumes that attach to an ECS instance and deliver the low-latency access a database needs. It behaves like a local disk rather than an object or shared file store.

Question 13Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service provides a managed, highly available in-memory data store commonly used for caching and session storage?

  1. DCS Correct answer.
  2. RDS
  3. DIS
  4. OBS

Explanation

Distributed Cache Service is the managed in-memory caching offering, used to accelerate reads and hold session data with low latency. It is distinct from relational databases, object storage, and data ingestion services.

Question 14Huawei Cloud fundamentals and cloud service overview

A company must connect its on-premises data center to Huawei Cloud with a private, dedicated connection that avoids the public internet. Which service should it choose?

  1. Direct Connect Correct answer.
  2. VPN
  3. EIP
  4. NAT Gateway

Explanation

Direct Connect establishes a dedicated private network connection between an on-premises environment and Huawei Cloud, avoiding public internet paths. It is chosen when predictable latency and privacy are required.

Question 15Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service is used to create custom machine images so that identical ECS instances can be launched repeatedly?

  1. AS
  2. IMS Correct answer.
  3. CTS
  4. BMS

Explanation

Image Management Service stores and manages images, including custom images built from existing servers, so consistent ECS instances can be launched repeatedly. It standardizes the operating environment across deployments.

Question 16Huawei Cloud fundamentals and cloud service overview

An application's traffic varies widely by hour. Which Huawei Cloud capability automatically adjusts the number of ECS instances to match demand?

  1. ELB health check
  2. VPC route table
  3. Auto Scaling Correct answer.
  4. Cloud Eye alarm only

Explanation

Auto Scaling adds or removes ECS instances according to configured policies and metrics, keeping capacity aligned with demand. It is the service designed for elastic adjustment of instance count.

Question 17Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service centralizes the recording of API operations for auditing who did what and when in an account?

  1. CTS Correct answer.
  2. CES
  3. LTS
  4. IAM

Explanation

Cloud Trace Service records management and API operations in an account, producing an audit trail of actions and their sources. It answers who performed which operation and when, which is the auditing purpose described.

Question 18Huawei Cloud fundamentals and cloud service overview

A team wants to give each developer only the permissions needed for their role, following least privilege. Which Huawei Cloud service is used to define users, groups, and permission policies?

  1. IAM Correct answer.
  2. VPC
  3. ELB
  4. OBS

Explanation

Identity and Access Management defines users, groups, roles, and policies that grant specific permissions, enabling least-privilege access. It is the central authorization service for the account.

Question 19Huawei Cloud fundamentals and cloud service overview

A web application serves users across a continent and needs faster delivery of static content with lower latency. Which Huawei Cloud service should be used?

  1. BMS
  2. DCS
  3. CDN Correct answer.
  4. SFS

Explanation

Content Delivery Network caches static content at edge nodes close to users, reducing latency and origin load for geographically distributed audiences. It is the standard acceleration service for static delivery.

Question 20Huawei Cloud fundamentals and cloud service overview

Which statement correctly distinguishes block, file, and object storage as offered on Huawei Cloud?

  1. EVS is block storage for a single instance, SFS is shared file storage, and OBS is object storage accessed by key Correct answer.
  2. SFS is block storage for one instance and OBS is a shared file system
  3. All three are accessed by object keys over HTTP
  4. EVS is object storage, SFS is block storage, and OBS is file storage

Explanation

EVS volumes present as block devices attached to instances, SFS provides a shared POSIX-style file system across instances, and OBS stores objects addressed by key. Each maps to a different access model and use case.

Question 21Huawei Cloud fundamentals and cloud service overview

A company needs to analyze very large datasets with a managed data warehouse supporting massively parallel processing. Which Huawei Cloud service is designed for this?

  1. DCS
  2. ELB
  3. DWS Correct answer.
  4. IMS

Explanation

Data Warehouse Service is a managed analytical database built on massively parallel processing, suited to large-scale query and analytics workloads. The other options address caching, traffic distribution, and image management.

Question 22Huawei Cloud fundamentals and cloud service overview

An enterprise needs a managed big data platform on Huawei Cloud to run Hadoop and Spark clusters without operating the cluster infrastructure itself. Which service fits?

  1. CTS
  2. RDS
  3. MRS Correct answer.
  4. CDN

Explanation

MapReduce Service is the managed big data platform that provisions and runs Hadoop and Spark clusters, removing infrastructure operations from the customer. It is purpose-built for hosted big data processing.

Question 23Huawei Cloud fundamentals and cloud service overview

A team must migrate an on-premises VMware virtual machine to Huawei Cloud with minimal application changes. Which service is intended for this server migration?

  1. SMS Correct answer.
  2. ELB
  3. DCS
  4. OBS

Explanation

Server Migration Service moves physical, virtual, or cloud servers to Huawei Cloud ECS by replicating the source system, minimizing application rework. It is the dedicated migration tool for server workloads.

Question 24Huawei Cloud fundamentals and cloud service overview

Which combination best reflects a layered design where compute, storage, networking, and monitoring are chosen as separate Huawei Cloud services?

  1. ECS for compute, OBS for object storage, VPC for networking, and CES for monitoring Correct answer.
  2. IAM for compute, ECS for identity, OBS for networking, and VPC for storage
  3. RDS for networking, ELB for storage, VPC for compute, and OBS for monitoring
  4. ECS for storage, OBS for compute, VPC for monitoring, and CES for networking

Explanation

Huawei Cloud composes workloads from specialized services: ECS supplies compute, OBS supplies object storage, VPC supplies isolated networking, and Cloud Eye supplies monitoring. This layering lets each tier scale and be secured independently.

Question 25Huawei Cloud fundamentals and cloud service overview

A customer wants to protect data at rest in OBS and control who can read a bucket. Which two Huawei Cloud capabilities are most directly relevant?

  1. Server-side encryption and bucket policies or IAM permissions Correct answer.
  2. CDN caching and NAT Gateway rules
  3. ELB health checks and route tables
  4. Auto Scaling policies and EVS snapshots

Explanation

Data at rest in OBS is protected through server-side encryption, while access to buckets is governed by bucket policies and IAM permissions. Together they address confidentiality and authorization for stored objects.

Question 26Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service is the entry point for identity and access management, where accounts, users, groups, and permissions are defined?

  1. Identity and Access Management (IAM) Correct answer.
  2. Tag Management Service
  3. Simple Message Notification
  4. Cloud Eye

Explanation

IAM is the account and permission service on Huawei Cloud: it holds user accounts, user groups, policies, and projects, and it issues the credentials used by other services. Cloud Eye is monitoring, Tag Management organizes resources by tags, and SMN delivers notifications.

Question 27Huawei Cloud fundamentals and cloud service overview

A team needs a fully managed service to build and run applications in containers without provisioning or managing the underlying cluster nodes. Which Huawei Cloud service fits?

  1. Virtual Private Cloud (VPC)
  2. Cloud Container Engine (CCE) Correct answer.
  3. Cloud Connect
  4. Bare Metal Server

Explanation

Cloud Container Engine is Huawei Cloud's managed Kubernetes service, and in its managed-node mode the control plane and worker nodes are maintained by the provider so the team deploys workloads rather than clusters. Bare Metal Server supplies dedicated physical hosts, VPC supplies isolated networks, and Cloud Connect links on-premises networks to the cloud.

Question 28Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service provides a managed message queue that decouples producers from consumers in a distributed application?

  1. Cloud Trace Service
  2. Distributed Message Service (DMS) Correct answer.
  3. Data Encryption Workshop
  4. Object Storage Service

Explanation

Distributed Message Service offers managed Kafka and RabbitMQ-compatible queues so producers and consumers can scale and fail independently. Data Encryption Workshop handles keys and encryption, Cloud Trace Service records management-plane audit events, and OBS stores objects.

Question 29Huawei Cloud fundamentals and cloud service overview

An application running on ECS instances must read and write shared files through standard NFS or CIFS protocols, with capacity that grows on demand. Which Huawei Cloud storage service should be selected?

  1. Scalable File Service Correct answer.
  2. Elastic Volume Service
  3. Cloud Backup and Recovery
  4. Object Storage Service

Explanation

Scalable File Service exposes shared file systems over NFS and CIFS so multiple compute instances can mount the same directory, and capacity scales automatically. OBS is object-based, EVS volumes attach to a single instance as block devices, and CBR only creates backups.

Question 30Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service provides a content delivery network that caches static resources at edge nodes close to end users?

  1. NAT Gateway
  2. Elastic Load Balance
  3. Content Delivery Network Correct answer.
  4. Direct Connect

Explanation

Content Delivery Network caches origin content at distributed edge nodes so users are served from a nearby location, reducing latency and origin load. Elastic Load Balance distributes traffic among backends inside a region, Direct Connect provides a private link to on-premises, and NAT Gateway enables outbound internet access.

Question 31Huawei Cloud fundamentals and cloud service overview

A solutions architect is comparing deployment models and must explain when a public cloud is preferred over a private cloud. Which statement is the strongest justification for public cloud?

  1. The organization needs elastic capacity without large upfront capital spending on hardware Correct answer.
  2. The organization requires physical isolation of every server from other tenants
  3. The organization has a fixed, unchanging demand that never varies
  4. The organization must keep all workloads on hardware it owns and operates

Explanation

Public cloud converts capital expenditure into pay-per-use operating expenditure and allows capacity to scale up and down quickly, which suits variable or unpredictable demand. Ownership of hardware, strict physical isolation, and completely static demand are the situations where private or dedicated infrastructure is more defensible.

Question 32Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service is designed to collect logs and metrics and raise alarms when thresholds are breached, giving operations teams a single monitoring view?

  1. Identity and Access Management
  2. Cloud Eye Correct answer.
  3. Scalable File Service
  4. Cloud Container Engine

Explanation

Cloud Eye is the monitoring platform: it gathers metrics from services such as ECS and RDS, supports dashboards, and triggers alarm actions when a rule is met. IAM manages identities, CCE runs containers, and SFS provides shared file storage.

Question 33Huawei Cloud fundamentals and cloud service overview

A company wants to run an application on Huawei Cloud with servers in two availability zones of the same region and keep a single VPC for both. Which statement is correct about this design?

  1. Each subnet in a VPC can contain resources from only one region
  2. A VPC spans the region, and subnets can be created in different availability zones within it Correct answer.
  3. A VPC is bound to one availability zone, so two VPCs are required
  4. Availability zones inside a region cannot be connected by a private network

Explanation

On Huawei Cloud a VPC is a region-level construct, and subnets inside it are created in a chosen availability zone, so a single VPC can host subnets in several AZs of the same region. Instances in different AZs of that VPC communicate privately, which is the basis of cross-AZ high availability.

Question 34Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service provides a managed relational database engine that handles routine maintenance such as backups and patching for the customer?

  1. Relational Database Service Correct answer.
  2. Cloud Eye
  3. Elastic Volume Service
  4. Virtual Private Cloud

Explanation

Relational Database Service is the managed database offering: the provider handles installation, patching, backup, and failover for supported engines while the customer manages schemas and data. The other options are monitoring, block storage, and networking services.

Question 35Huawei Cloud fundamentals and cloud service overview

A startup expects traffic to grow from a few hundred to several million requests per day over a year and wants to avoid re-architecting. Which characteristic of cloud services most directly supports this?

  1. Manual procurement of physical servers for each growth step
  2. Colocation of all servers in a single rack
  3. Fixed capacity purchased for a multi-year term
  4. Elasticity, so resources can be scaled out and back as demand changes Correct answer.

Explanation

Elasticity lets a workload add or remove compute and storage capacity through APIs or auto scaling policies as load changes, so the architecture does not need to be rebuilt at each growth stage. Fixed purchased capacity, manual hardware procurement, and single-rack placement all work against rapid, variable growth.

Question 36Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service offers a managed NoSQL key-value and document database suitable for high-throughput, low-latency access patterns?

  1. Relational Database Service
  2. Cloud Backup and Recovery
  3. Document Database Service Correct answer.
  4. Data Warehouse Service

Explanation

Document Database Service is the managed NoSQL offering compatible with MongoDB-style document models, aimed at flexible schemas and high-throughput access. Relational Database Service is for SQL engines, Data Warehouse Service is for analytical MPP workloads, and CBR provides backups.

Question 37Huawei Cloud fundamentals and cloud service overview

An administrator must give an application running on ECS instances permission to upload files to OBS without embedding long-term access keys in the code. Which Huawei Cloud mechanism is intended for this?

  1. A permanent access key pair hard-coded in the source
  2. A shared account password stored in a configuration file
  3. Agency and temporary security credentials issued through IAM Correct answer.
  4. Disabling authentication on the target bucket

Explanation

IAM agencies let a cloud service or resource assume a role and receive temporary credentials, so applications obtain short-lived tokens instead of storing permanent secrets. Hard-coded keys, shared passwords, and anonymous bucket access all weaken security and violate least-privilege practice.

Question 38Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service lets an organization connect its own data center to a VPC over a private, dedicated link rather than the public internet?

  1. NAT Gateway
  2. Content Delivery Network
  3. Elastic IP
  4. Direct Connect Correct answer.

Explanation

Direct Connect provisions a dedicated private connection between an on-premises network and Huawei Cloud, giving predictable latency and avoiding public internet exposure. NAT Gateway and Elastic IP deal with internet access, and CDN accelerates content delivery to end users.

Question 39Huawei Cloud fundamentals and cloud service overview

A team is choosing between an Elastic IP and a NAT Gateway for outbound internet access from many private ECS instances. Which consideration best justifies the NAT Gateway?

  1. It provides lower latency for inbound connections from the internet
  2. Many instances can share outbound access without each needing its own public address Correct answer.
  3. It removes the need for any subnet or route configuration
  4. It encrypts all traffic between the instances and the internet

Explanation

A NAT Gateway performs source address translation so a pool of private instances can reach the internet through shared public addresses, which conserves public IPs and keeps instances unreachable from outside. Elastic IPs bind a public address to an individual instance and are better suited to resources that must be directly reachable.

Question 40Huawei Cloud fundamentals and cloud service overview

Which Huawei Cloud service provides a managed data warehouse that uses massively parallel processing for large-scale analytical queries?

  1. Relational Database Service
  2. Distributed Message Service
  3. Data Warehouse Service Correct answer.
  4. Scalable File Service

Explanation

Data Warehouse Service is built for analytical workloads, using columnar storage and massively parallel processing across nodes to scan and aggregate very large datasets. RDS targets transactional SQL, DMS is a message queue, and SFS is shared file storage.

Question 41Compute services (ECS, AS, IMS)

An ECS instance is created in a region with availability zones AZ1 and AZ2. The instance is placed in AZ1. Which statement describes the default resilience of this single instance?

  1. The instance is backed by a cross-region active-active pair
  2. The instance is automatically replicated to AZ2 for high availability
  3. The instance runs in AZ1 only; if AZ1 fails, the instance is affected Correct answer.
  4. The instance floats between AZ1 and AZ2 based on load

Explanation

An ECS instance is bound to the availability zone in which it is created; the platform does not silently replicate a single instance to another AZ. Cross-AZ resilience is achieved by deploying multiple instances across AZs behind an ELB or AS group. A single instance therefore remains exposed to an AZ-level failure.

Question 42Compute services (ECS, AS, IMS)

A workload needs a virtual machine whose CPU-to-memory ratio suits memory-intensive in-memory databases. Which ECS flavor family should be selected?

  1. Disk-intensive type
  2. GPU-accelerated type
  3. Memory-optimized type Correct answer.
  4. General-purpose type

Explanation

ECS flavor families are grouped by resource ratio: general-purpose balances vCPU and memory, memory-optimized offers a higher memory-to-vCPU ratio, disk-intensive emphasizes local storage throughput, and GPU types provide accelerators. In-memory databases such as large caches are the classic fit for memory-optimized flavors.

Question 43Compute services (ECS, AS, IMS)

Which ECS disk type provides the lowest and most consistent latency for a transactional database that requires high random IOPS?

  1. Shared file system mounted over NFS
  2. Ultra-high I/O EVS disk Correct answer.
  3. Object storage bucket mounted to the instance
  4. Standard EVS disk

Explanation

EVS (Elastic Volume Service) disks attach as block devices, and the ultra-high I/O tier is designed for latency-sensitive, high-IOPS workloads such as OLTP databases. Standard EVS offers lower baseline performance, while object storage and NFS file systems add network overhead unsuitable for a low-latency database data file.

Question 44Compute services (ECS, AS, IMS)

An administrator must allow SSH access to a Linux ECS instance from a single corporate egress IP. Which security group rule configuration achieves this with least exposure?

  1. Outbound rule allowing TCP 22 to 0.0.0.0/0
  2. Inbound rule allowing TCP 22 from the corporate IP address only Correct answer.
  3. Inbound rule allowing all protocols from the corporate subnet
  4. Inbound rule allowing TCP 22 from 0.0.0.0/0

Explanation

Security groups are stateful packet filters applied to the instance's virtual NIC; inbound rules control which sources may reach a port. Restricting TCP 22 to the known corporate IP minimizes exposure while still permitting administration. Outbound rules govern traffic leaving the instance and do not admit SSH sessions.

Question 45Compute services (ECS, AS, IMS)

Which statement correctly distinguishes an ECS system disk from a data disk?

  1. Both disks are ephemeral and are deleted whenever the instance reboots
  2. Data disks are mandatory and one must be attached at creation
  3. The system disk hosts the OS image and is created with the instance; data disks are attached separately for application data Correct answer.
  4. The system disk can only be an object bucket, while data disks are always EVS volumes

Explanation

When an ECS instance is created, a system disk is provisioned from the selected image and carries the operating system. Additional EVS volumes can be attached as data disks and formatted for application data. Data disks are optional, and neither disk type is lost on a simple reboot.

Question 46Compute services (ECS, AS, IMS)

A team wants to create a custom private image from a running Linux ECS instance that has been configured with their middleware. What is the standard IMS procedure?

  1. Export the instance's security group rules and reapply them to a new flavor
  2. Create an image from the ECS instance, then use that private image to launch new instances Correct answer.
  3. Copy the instance's public IP address into a new instance template
  4. Snapshot only the data disk and boot new instances from the snapshot

Explanation

IMS creates private images from an existing ECS instance or its system disk, capturing the OS and installed software. That image can then be used to launch identically configured instances or to drive an AS configuration. Security groups and IP addresses are networking attributes and do not carry the software configuration.

Question 47Compute services (ECS, AS, IMS)

In Auto Scaling, what is the role of the AS configuration (scaling configuration)?

  1. It assigns elastic IP addresses to instances leaving the group
  2. It defines the schedule and thresholds that trigger scaling actions
  3. It records the health status of each instance in the group
  4. It defines the template of specifications used when AS adds instances, such as image, flavor, disk, and key pair Correct answer.

Explanation

An AS configuration is a template: it specifies the image, flavor, disk, network, security group, and login credentials used whenever the group launches a new instance. Triggering behavior belongs to AS policies and scheduled tasks, and health checking is a property of the group itself.

Question 48Compute services (ECS, AS, IMS)

Which IMS image type is shared by the cloud platform and can be used directly by any tenant without importing their own?

  1. Marketplace image requiring a license purchase
  2. Public image Correct answer.
  3. Shared image from another tenant
  4. Private image

Explanation

IMS distinguishes public images, which the platform provides and all tenants can use, from private images owned by a tenant, shared images granted by another tenant, and marketplace images. A public image requires no import step and no purchase.

Question 49Compute services (ECS, AS, IMS)

An application runs on ECS instances behind an ELB and must scale out when average CPU utilization exceeds 70 percent for five minutes. Which AS component expresses this condition?

  1. A scheduled scaling task set to run every five minutes
  2. A lifecycle hook that pauses instance creation
  3. A dynamic scaling policy based on the CPU utilization metric Correct answer.
  4. A scaling configuration that sets the instance flavor

Explanation

Dynamic scaling policies bind a monitored metric, such as average CPU utilization, to a threshold and a cooldown, then add or remove instances when the condition holds. A scaling configuration only describes the instance template, and scheduled tasks act on clock time rather than on load.

Question 50Compute services (ECS, AS, IMS)

An AS group has minimum 2, maximum 6, and desired 3 instances. A scale-in policy removes one instance. What is the resulting desired capacity?

  1. 1
  2. 3
  3. 2 Correct answer.
  4. 6

Explanation

Scale-in reduces the desired capacity by the configured adjustment, so 3 minus 1 equals 2. The minimum of 2 is not breached, so no clamping occurs. The maximum of 6 only limits scale-out and does not affect this result.