HCIA-Cloud Service study plan

Define the Huawei Cloud shared responsibility model and distinguish which controls belong to the customer versus the cloud provider.

Map the core service families (compute, storage, networking, security, management) to their console entry points and typical use cases.

Explain the region/availability zone (AZ) hierarchy and describe how project and IAM scoping affects resource visibility.

Compare on-demand, yearly/monthly, and spot-style billing models and identify which workloads suit each.

Provision an ECS instance end to end, selecting flavor family, image, disk type, VPC, and security group.

Differentiate general-purpose, memory-optimized, and compute-optimized flavor families and justify a choice for three given workloads.

Configure key pair or password login and verify remote access to a running instance.

Describe the ECS lifecycle states and the effect of stop, reboot, and release on billing and data.

Create a private image from an existing ECS and use it to launch a second instance.

Configure an Auto Scaling group with a scaling policy tied to a CPU metric and confirm the group scales out under load.

Explain how AS interacts with ELB health checks and what happens to instances that fail them.

Distinguish IMS public, private, and shared images and state when each is appropriate.

Create an OBS bucket and upload, download, and list objects using both the console and an API or CLI call.

Configure bucket policies and ACLs to grant read-only access to a second account and verify the result.

Compare OBS storage classes and lifecycle transition rules, then design a lifecycle policy for log archival.

Differentiate EVS disk types by IOPS and throughput and attach an EVS volume to an ECS instance.

Mount an SFS file system on two ECS instances and confirm shared read/write access to the same file.

Build a VPC with at least two subnets in different AZs and place resources in each.

Configure a security group and a network ACL, then test which traffic each one actually blocks.

Explain the difference between security groups and network ACLs in statefulness and scope.

Associate an EIP with an ECS instance and confirm inbound access from the internet.

Create a load balancer with a listener and backend server group, then verify traffic distribution across two instances.

Configure health checks and observe the load balancer removing and restoring a failed backend.

Sketch the traffic path from internet client through EIP and ELB to backend instances and label each hop.

Create IAM users and groups and assign policies that enforce least privilege for a read-only auditor role.

Enable a key management service key and encrypt an OBS bucket or EVS volume with it.

Configure a cloud monitoring alarm on an ECS metric that notifies a topic when a threshold is breached.

Describe how a web application firewall differs from a security group in the threats it addresses.

Complete two full-length timed practice sets and score each domain separately to find weak areas.

Re-study the two lowest-scoring domains using the week-by-week notes and re-test those areas.

Explain aloud, without notes, the end-to-end architecture of a web app on Huawei Cloud covering compute, storage, networking, and security.

Review every missed practice question and record the underlying concept, not just the correct answer.