First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Cloud Computing Fundamentals
In cloud computing, which characteristic allows computing resources to be rapidly added or released to match current demand, giving the consumer the impression of unlimited capacity?
- Rapid elasticity Correct answer.
- Measured service
- Resource pooling
- Multi-tenancy
Explanation
Rapid elasticity describes the ability to scale resources outward and inward automatically or on demand, so capacity appears unlimited to the consumer. It is the property that distinguishes on-demand scaling from fixed-capacity provisioning.
Question 2Cloud Computing Fundamentals
A company wants to avoid large upfront hardware purchases and instead pays monthly for the virtual machines it consumes. Which cloud benefit does this primarily illustrate?
- Data locality is guaranteed
- Licensing costs disappear
- Physical security is eliminated
- CapEx is converted into OpEx Correct answer.
Explanation
Cloud consumption converts capital expenditure on owned infrastructure into operating expenditure paid as a recurring usage-based fee. This shifts financial risk and improves cash-flow flexibility for the consumer.
Question 3Cloud Computing Fundamentals
Which cloud service model gives the consumer the greatest degree of control over the operating system and middleware?
- FaaS
- PaaS
- SaaS
- IaaS Correct answer.
Explanation
In IaaS the provider supplies virtualized compute, storage, and networking, while the consumer manages the guest OS, middleware, runtime, and applications. Control over the OS is therefore highest among the listed models.
Question 4Cloud Computing Fundamentals
Which deployment model places infrastructure on the premises of a single organization and is operated only for that organization?
- Public cloud
- Community cloud
- Private cloud Correct answer.
- Hybrid cloud
Explanation
A private cloud is provisioned for exclusive use by a single organization, whether it is operated internally or by a third party. Exclusivity of use, not physical location, is the defining property.
Question 5Cloud Computing Fundamentals
Which technology is the primary enabler of server consolidation in a cloud data center?
- Static routing
- RAID striping
- DNS round robin
- Server virtualization Correct answer.
Explanation
Server virtualization lets multiple isolated virtual machines share one physical host, raising utilization and enabling consolidation. Without a hypervisor layer, each workload would typically need its own physical server.
Question 6Cloud Computing Fundamentals
What is the role of the hypervisor in a virtualized environment?
- It provides load balancing for external web clients
- It encrypts traffic between virtual machines
- It stores virtual machine disk images in object storage
- It abstracts physical resources and schedules virtual machines onto them Correct answer.
Explanation
The hypervisor, or virtual machine monitor, presents abstracted virtual hardware to guests and allocates physical CPU, memory, and I/O among them. It is the layer that makes multiple isolated guests possible on one host.
Question 7Cloud Computing Fundamentals
Which statement best describes the shared responsibility model in public cloud?
- The provider secures the cloud infrastructure while the customer secures what it puts in the cloud Correct answer.
- The provider is responsible for all security controls including customer data
- Security responsibility is split equally by contract for every control
- The customer is responsible for physical security of the provider's data center
Explanation
Under the shared responsibility model the provider secures facilities, hardware, and the managed platform, while the customer secures its own data, identities, configurations, and workloads. The exact boundary shifts with the service model.
Question 8Cloud Computing Fundamentals
Which network function in a cloud data center connects virtual machines to each other and to the physical network while enforcing isolation between tenants?
- Load balancer
- Domain name server
- Hardware firewall appliance
- Virtual switch Correct answer.
Explanation
A virtual switch runs in the virtualization layer and forwards traffic between virtual NICs and uplinks, applying VLAN or overlay isolation per tenant. It is the fundamental virtual networking element inside a host.
Question 9Cloud Computing Fundamentals
A workload runs at a steady 20 percent CPU utilization for most of the year but spikes to 90 percent during a two-week sales event. Which scaling approach is most cost-effective?
- Permanent capacity sized for 20 percent with no scaling
- Manual provisioning of peak capacity one year in advance
- Baseline capacity with automatic scale-out during the event Correct answer.
- Permanent capacity sized for the 90 percent peak
Explanation
Elastic scaling lets the deployment hold a right-sized baseline and add instances only during the predictable spike, so payment follows real consumption. Static peak sizing wastes money for most of the year, and static low sizing risks overload.
Question 10Cloud Computing Fundamentals
A team needs to deploy a containerized application without managing any cluster nodes or control-plane servers. Which service model fits best?
- On-premises hypervisor
- Bare-metal server
- IaaS virtual machine
- Serverless container service Correct answer.
Explanation
A serverless container platform runs containers while the provider operates the cluster and control plane, so the team manages only images and configuration. The other options require the team to patch and operate hosts or the orchestration layer.
Question 11Cloud Computing Fundamentals
An enterprise keeps regulated records in its own data center but bursts analytics jobs to a public cloud. Which deployment model is being used?
- Public cloud
- Hybrid cloud Correct answer.
- Private cloud
- Community cloud
Explanation
A hybrid cloud combines a private environment with a public one and links them so workloads and data can move between them. Here the private data center holds regulated data while public capacity absorbs burst analytics.
Question 12Cloud Computing Fundamentals
Which type of hypervisor runs directly on the physical hardware without an intervening host operating system?
- Type 2
- Container runtime
- Type 1 Correct answer.
- Paravirtualized driver
Explanation
A Type 1, or bare-metal, hypervisor is installed on the hardware itself and manages guests directly, which is typical for cloud hosts. A Type 2 hypervisor instead runs as an application on top of a conventional host OS.
Question 13Cloud Computing Fundamentals
Which storage type is most appropriate for a shared directory that many virtual machines must mount concurrently with low latency?
- Object storage
- Local disk on a single host
- Distributed file storage Correct answer.
- Archive tape
Explanation
Distributed file storage presents a shared POSIX-style file system that many hosts can mount at once with low latency. Object storage uses an HTTP API rather than mount semantics, and local disk cannot be shared across hosts.
Question 14Cloud Computing Fundamentals
What is the main purpose of resource pooling in cloud computing?
- To encrypt stored data at rest
- To guarantee each consumer a dedicated physical server
- To limit each tenant to a single virtual machine
- To serve multiple consumers from shared physical resources that are dynamically assigned Correct answer.
Explanation
Resource pooling consolidates physical resources into a shared pool from which portions are assigned and reassigned to consumers on demand. Tenants share the underlying hardware while remaining logically isolated.
Question 15Cloud Computing Fundamentals
Which statement accurately distinguishes vertical from horizontal scaling?
- Both terms describe adding storage capacity only
- Vertical scaling adds CPU or memory to an existing node, while horizontal scaling adds more nodes Correct answer.
- Vertical scaling adds more nodes, while horizontal scaling enlarges one node
- Both terms require downtime by definition
Explanation
Vertical scaling, or scaling up, increases the resources of a single node, whereas horizontal scaling, or scaling out, adds nodes to a pool. Horizontal scaling generally supports higher availability and is preferred for distributed applications.
Question 16Cloud Computing Fundamentals
Why does a cloud provider typically use live migration of virtual machines?
- To change the guest operating system version
- To convert a virtual machine into a container image
- To move a running workload to another host for maintenance or load balancing with minimal interruption Correct answer.
- To increase the disk size of the virtual machine
Explanation
Live migration transfers a running virtual machine's memory state to another host so the guest continues with negligible downtime. Providers use it for hardware maintenance, power savings, and balancing load across hosts.
Question 17Cloud Computing Fundamentals
A customer needs block-level storage attached to a single virtual machine for a transactional database. Which service should be selected?
- An object storage bucket
- A shared file system
- A content delivery network
- A cloud volume attached to the instance Correct answer.
Explanation
Block volumes present raw block devices that the guest formats with its own file system, which suits low-latency transactional databases. Object storage and shared file systems offer different access semantics and are not attached as block devices.
Question 18Cloud Computing Fundamentals
Which statement correctly describes a security group in a typical cloud virtual network?
- It acts as a stateful virtual firewall controlling traffic to and from associated instances Correct answer.
- It provides DNS resolution for private zones
- It replicates data between regions
- It assigns public IP addresses to instances
Explanation
A security group is a stateful packet filter attached to instances or network interfaces, permitting only the traffic its rules allow. Return traffic for permitted connections is automatically allowed because the filter is stateful.
Question 19Cloud Computing Fundamentals
A provider guarantees 99.95 percent monthly availability for a single-zone service. Approximately how much downtime does this allow in a 30-day month?
- About 2 minutes
- About 3.6 hours
- About 22 minutes Correct answer.
- About 7.2 hours
Explanation
The unavailable fraction is 0.05 percent, and 0.0005 multiplied by 43,200 minutes in 30 days gives about 21.6 minutes. This is roughly 22 minutes of permitted downtime for the month.
Question 20Cloud Computing Fundamentals
Which pattern best improves the resilience of an application against the failure of an entire data center?
- Deploying instances across multiple availability zones in one region Correct answer.
- Taking nightly backups to the same host
- Deploying all instances in a single availability zone
- Relying on a single instance with a larger CPU
Explanation
Availability zones are isolated fault domains within a region, so spreading instances across zones keeps the application running when one zone fails. A single zone or single instance creates a single point of failure.
Question 21Cloud Computing Fundamentals
Which statement best explains why multi-tenant isolation must be enforced at the network and storage layers, not only at the application layer?
- A defect below the application could expose another tenant's traffic or data, so isolation must hold at every layer Correct answer.
- Storage isolation is unnecessary when data is compressed
- Network isolation is only needed for internet-facing workloads
- Application-layer checks are sufficient because tenants never share hardware
Explanation
Tenants share hypervisors, switches, and storage systems, so a flaw in a lower layer can breach confidentiality even if the application is correct. Defense in depth requires isolation to be enforced at each layer of the stack.
Question 22Cloud Computing Fundamentals
An application writes each record to a primary database and then to a message queue for downstream processing. Which property does this design primarily sacrifice, and why?
- Availability, because the queue is always reachable
- Immediate consistency across both stores, because the two writes are not atomic Correct answer.
- Durability, because messages are persisted on disk
- Partition tolerance, because the database is replicated
Explanation
Writing to a database and a queue without a distributed transaction means one write can succeed while the other fails, so the two stores are only eventually consistent. The design trades immediate cross-store consistency for decoupling and throughput.
Question 23Cloud Computing Fundamentals
A tenant reports that its virtual machines show high CPU steal time while its own guests are mostly idle. Which explanation is most consistent with this symptom?
- The virtual disk is larger than the file system
- The physical host is oversubscribed and other virtual machines are consuming the shared CPU Correct answer.
- The security group is dropping packets
- The guest operating system has too many idle processes
Explanation
Steal time measures the share of time a virtual CPU was runnable but the physical CPU was serving other guests, which indicates host-level CPU contention. Idle guests with high steal point to noisy neighbors on an oversubscribed host.
Question 24Cloud Computing Fundamentals
A team stores session state only in the local memory of each web server behind a load balancer. What failure occurs when the load balancer scales out, and what is the standard remedy?
- Sessions move to the client; increase browser cache
- Sessions are lost or inconsistent across servers; move session state to a shared external store Correct answer.
- Sessions become encrypted; disable transport security
- Sessions replicate automatically; no change is needed
Explanation
Local in-memory sessions are bound to one server, so requests routed to a new server do not find the session, causing logouts or inconsistency. Externalizing session state to a shared cache or database makes the tier stateless and horizontally scalable.
Question 25Cloud Computing Fundamentals
An object storage bucket must allow anonymous downloads of public images while keeping all other objects private. Which approach satisfies this requirement?
- Disable bucket logging so object names stay hidden
- Grant write permission to anonymous users on the whole bucket
- Make the entire bucket public and rely on unguessable object names
- Grant read permission on the specific public objects or prefix to an anonymous principal Correct answer.
Explanation
Least privilege requires granting anonymous read only on the specific objects or prefix intended for public access while the rest of the bucket stays private. Security through obscurity or broad grants exposes data.
Question 26Cloud Computing Fundamentals
Which cloud service model delivers a complete application to end users over the internet while the provider manages the underlying infrastructure, platform, and application logic?
- Function as a Service (FaaS)
- Software as a Service (SaaS) Correct answer.
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
Explanation
In SaaS the provider operates the entire stack from hardware to the application, and users simply access the software, often through a browser. IaaS exposes virtualized compute and storage, PaaS offers a runtime for deploying code, and FaaS runs individual functions, so none of these delivers a finished application.
Question 27Cloud Computing Fundamentals
Which characteristic of cloud computing allows a provider to rapidly add or remove compute and storage resources to match demand without manual intervention?
- Rapid elasticity Correct answer.
- Resource pooling
- Broad network access
- Measured service
Explanation
Rapid elasticity is the ability to scale resources outward and inward automatically as workload changes, so capacity can appear and disappear quickly. Broad network access concerns connectivity, measured service concerns metering and billing, and resource pooling concerns sharing physical assets among tenants.
Question 28Cloud Computing Fundamentals
Which cloud deployment model places infrastructure on the customer's own premises while using cloud technologies such as virtualization and self-service portals for internal users?
- Community cloud
- Hybrid cloud
- Private cloud Correct answer.
- Public cloud
Explanation
A private cloud applies cloud-style automation and self-service to infrastructure dedicated to a single organization, which may run in the organization's data center. Public cloud is shared and provider-operated, community cloud is shared by several related organizations, and hybrid cloud combines private and public environments.
Question 29Cloud Computing Fundamentals
In a cloud data center, which component is responsible for forwarding packets between virtual machines on different physical hosts?
- The hypervisor's CPU scheduler
- The physical network fabric and its routing devices Correct answer.
- The local disk controller
- The virtual switch on each host
Explanation
Traffic that must leave a host to reach a VM on another host is carried by the physical network fabric, including switches and routers that provide Layer 2 and Layer 3 forwarding. A virtual switch mainly handles local bridging within one host, the CPU scheduler allocates processor time, and the disk controller manages storage I/O.
Question 30Cloud Computing Fundamentals
A cloud provider offers a managed relational database service with automated backups, patching, and a choice of instance sizes. Which service model does this represent?
- FaaS
- SaaS
- IaaS
- PaaS Correct answer.
Explanation
A managed database is a platform service: the provider operates the database engine, backups, and patching, while the customer deploys schemas and data. It is not IaaS because the customer does not manage the virtual machine or database binaries, and it is not SaaS because the customer still supplies and controls the database content.
Question 31Cloud Computing Fundamentals
Which statement best describes the purpose of a cloud region and its availability zones?
- A region is a geographic area, and availability zones are isolated data center groups within that region. Correct answer.
- A region is a single data hall, and availability zones are racks inside it.
- A region is a virtual network, and availability zones are subnets within it.
- A region is a billing boundary, and availability zones are separate customer accounts.
Explanation
A region is a geographic area that contains multiple availability zones, which are physically separated data center groups with independent power and cooling. This design lets customers place workloads across zones to survive the failure of one facility while keeping latency low within the region.
Question 32Cloud Computing Fundamentals
A company wants to move a legacy application to the cloud with the fewest code changes and continue managing its own operating systems and middleware. Which service model fits best?
- PaaS
- IaaS Correct answer.
- SaaS
- FaaS
Explanation
IaaS supplies virtual machines, storage, and networking while leaving the guest operating system and middleware under customer control, which minimizes changes for a legacy application. PaaS and FaaS would require adapting the application to a managed runtime, and SaaS replaces the application entirely.
Question 33Cloud Computing Fundamentals
Which statement correctly distinguishes object storage from block storage in cloud environments?
- Object storage requires a file system, while block storage requires a relational database.
- Object storage is mounted as a local disk, while block storage is accessed through HTTP APIs.
- Object storage manages data as objects with metadata in flat buckets, while block storage presents raw volumes to a single host. Correct answer.
- Object storage is always faster for transactional databases, while block storage is only for backups.
Explanation
Object storage stores each item as an object with data and metadata inside a flat bucket namespace, typically accessed over HTTP. Block storage exposes raw volumes that a host formats with a file system and uses like a local disk, which suits databases and boot disks.
Question 34Cloud Computing Fundamentals
An application must remain available when one availability zone fails. Which design most directly achieves this?
- Deploy all instances in one zone and take hourly snapshots.
- Deploy all instances in one zone and increase the size of each instance.
- Deploy instances across at least two zones behind a load balancer and replicate data between zones. Correct answer.
- Deploy instances in one zone and enable automatic scaling within that zone.
Explanation
Spreading instances across multiple availability zones and replicating data ensures that the loss of one zone leaves healthy capacity elsewhere. Snapshots and vertical scaling do not provide live capacity in another zone, and scaling within a single zone cannot survive the failure of that zone.
Question 35Cloud Computing Fundamentals
Which cloud capability allows a user to obtain additional virtual machines through an API call without contacting a human administrator?
- Data deduplication
- Fault tolerance
- Self-service provisioning Correct answer.
- Chargeback
Explanation
Self-service provisioning lets authorized users request and receive resources through a portal or API on demand, without manual intervention from the provider. Chargeback allocates costs, fault tolerance masks component failures, and deduplication reduces stored data, none of which provisions compute.
Question 36Cloud Computing Fundamentals
A customer runs a web tier whose traffic varies widely by time of day and wants the number of instances to follow demand automatically. Which cloud mechanism should be used?
- A load balancer with a fixed number of instances
- An auto-scaling policy driven by CPU or request metrics Correct answer.
- Manual provisioning of additional instances each morning
- A static reservation sized for peak load
Explanation
An auto-scaling policy monitors metrics such as CPU utilization or request count and adds or removes instances to match demand. A static peak-sized reservation wastes capacity during quiet periods, a fixed instance count cannot follow demand, and manual provisioning is slow and error-prone.
Question 37Cloud Computing Fundamentals
Which statement about the relationship between virtualization and cloud computing is most accurate?
- Cloud computing is a prerequisite for virtualization.
- Cloud computing relies on virtualization to pool and allocate physical resources, but it also requires automation, self-service, and metering. Correct answer.
- Virtualization eliminates the need for a network in cloud environments.
- Virtualization is the same thing as cloud computing.
Explanation
Virtualization provides the abstraction that lets many virtual machines share physical hosts, which underpins resource pooling in cloud environments. Cloud computing adds orchestration, self-service, elasticity, and measured service on top of that abstraction, so the two concepts are related but not identical.
Question 38Cloud Computing Fundamentals
A team needs a managed message queue that decouples producers from consumers and must survive the loss of a single availability zone. Which design choice should the team prioritize?
- A queue hosted on one large virtual machine with snapshots
- An in-memory queue on each producer application instance
- A replicated queue service that stores messages across multiple zones Correct answer.
- A single-broker deployment in one zone with local disk persistence
Explanation
Replicating queue data across availability zones keeps messages available if one zone fails, which is the core requirement for durability and resilience. A single broker, a single large VM, or in-memory queues on producers all create a single point of failure or lose messages when an instance stops.
Question 39Cloud Computing Fundamentals
An architect is comparing a cloud-native managed service with a self-managed deployment on virtual machines. Which factor most strongly favors the managed service for a small operations team?
- The managed service shifts patching, scaling, and failure recovery to the provider. Correct answer.
- The managed service guarantees that the application will never fail.
- The managed service removes the need for any application-level monitoring.
- The managed service always costs less than any self-managed deployment.
Explanation
A managed service transfers operational tasks such as patching, scaling, and recovering from host failures to the provider, which reduces the burden on a small team. Cost depends on usage and is not always lower, and the customer still monitors application behavior and must design for failure.
Question 40Cloud Computing Fundamentals
A company must keep sensitive data in its own data center for regulatory reasons but wants to use public cloud analytics on anonymized extracts. Which deployment approach best satisfies these constraints?
- Use a hybrid deployment that keeps regulated data on premises and sends only anonymized extracts to the public cloud. Correct answer.
- Use a community cloud shared with competitors to reduce cost.
- Run all analytics on a single on-premises server without cloud connectivity.
- Move all data and processing to a public cloud region.
Explanation
A hybrid deployment matches the requirement: regulated data stays under the company's control on premises, while anonymized extracts are processed by scalable public cloud analytics. Moving everything to the public cloud violates the data-residency constraint, and avoiding cloud entirely forfeits the desired analytics capability.
Question 41Huawei Cloud Computing Products and Solutions
Which Huawei Cloud service is the managed relational database offering that is compatible with MySQL, PostgreSQL, and SQL Server engines?
- Data Warehouse Service (DWS)
- Document Database Service (DDS)
- Cloud Table Service (CTS)
- Relational Database Service (RDS) Correct answer.
Explanation
RDS is Huawei Cloud's fully managed relational database service that supports multiple mainstream engines including MySQL, PostgreSQL, and SQL Server, with automated backups, monitoring, and scaling. DWS is an analytical data warehouse, DDS is a document-oriented NoSQL service, and CTS is an audit trail service, so none of them provide the multi-engine relational capability described.
Question 42Huawei Cloud Computing Products and Solutions
A team needs block storage that can be attached to an ECS instance and persists independently of the instance lifecycle. Which Huawei Cloud service fits?
- Object Storage Service (OBS)
- Scalable File Service (SFS)
- Cloud Backup and Recovery (CBR)
- Elastic Volume Service (EVS) Correct answer.
Explanation
EVS provides block-level disks that attach to ECS instances like local hard drives, and the volume persists even if the instance is deleted, allowing reattachment. OBS is HTTP-based object storage, SFS is a shared file system, and CBR is a backup service rather than primary block storage.
Question 43Huawei Cloud Computing Products and Solutions
Which Huawei Cloud service provides a fully managed, Kafka-compatible message queue for high-throughput streaming data ingestion?
- FunctionGraph
- ServiceStage
- Distributed Message Service (DMS) for Kafka Correct answer.
- API Gateway
Explanation
DMS offers a managed Kafka-compatible instance that handles topic partitions, replication, and scaling without the customer operating brokers. API Gateway publishes and governs REST APIs, FunctionGraph runs serverless functions, and ServiceStage is an application platform, so none of them deliver Kafka-style streaming messaging.
Question 44Huawei Cloud Computing Products and Solutions
What is the primary purpose of a Virtual Private Cloud (VPC) in Huawei Cloud?
- To provide a logically isolated network where you define subnets, routes, and security groups Correct answer.
- To cache static website content at edge locations close to users
- To host container images and Helm charts for deployment
- To convert speech to text through an API
Explanation
A VPC gives each tenant an isolated virtual network in which subnets, route tables, security groups, and gateways are configured, forming the foundation for ECS, RDS, and other resources. Content caching is done by CDN, image hosting by SWR, and speech conversion by AI services, so the other options describe unrelated products.
Question 45Huawei Cloud Computing Products and Solutions
Which Huawei Cloud load balancing option operates at Layer 7 and can route based on URL paths and host headers?
- NAT Gateway
- Direct Connect
- Elastic Load Balance dedicated Layer 4 listener
- Elastic Load Balance Layer 7 listener (HTTP/HTTPS) Correct answer.
Explanation
An ELB Layer 7 listener terminates HTTP or HTTPS and can forward requests using domain names, URL paths, and headers, enabling content-based routing. A Layer 4 listener only distributes TCP or UDP flows, NAT Gateway provides outbound internet access, and Direct Connect is a private dedicated link to the cloud.
Question 46Huawei Cloud Computing Products and Solutions
Which service should be used to distribute static images and videos to global users with low latency by caching content at edge nodes?
- Content Delivery Network (CDN) Correct answer.
- Cloud Connect
- Virtual Private Network
- Elastic IP
Explanation
CDN caches content on edge nodes near end users and serves requests from the closest cache, reducing latency and origin load for static assets. Cloud Connect and VPN build private network connectivity, and an Elastic IP is a public address for a cloud resource, so none of them perform edge content caching.
Question 47Huawei Cloud Computing Products and Solutions
Which Huawei Cloud service is designed for serverless execution of code in response to events, with no server provisioning by the user?
- FunctionGraph Correct answer.
- Elastic Cloud Server
- Bare Metal Server
- Cloud Container Engine
Explanation
FunctionGraph runs functions on demand in response to triggers such as object uploads or timers, and the platform manages all underlying servers and scaling. Bare Metal Server and Elastic Cloud Server require the user to manage the operating system on provisioned machines, and CCE manages container clusters rather than individual event-driven functions.
Question 48Huawei Cloud Computing Products and Solutions
Which Huawei Cloud service provides centralized, managed monitoring and alerting for ECS, RDS, and other resources?
- Cloud Eye (CES) Correct answer.
- Identity and Access Management (IAM)
- Log Tank Service (LTS)
- Tag Management Service
Explanation
Cloud Eye collects metrics from cloud resources, displays dashboards, and triggers alarms when thresholds are breached. LTS focuses on log collection and query, IAM controls authentication and authorization, and Tag Management organizes resources by labels, so none of them provide metric monitoring and alerting.
Question 49Huawei Cloud Computing Products and Solutions
An application running on ECS instances in a private subnet must download software patches from the internet without exposing the instances to inbound connections. Which Huawei Cloud service should be used?
- Elastic Load Balance
- VPN Gateway
- Direct Connect
- NAT Gateway Correct answer.
Explanation
A NAT Gateway lets instances in a private subnet initiate outbound internet connections through a shared public address while remaining unreachable from inbound internet traffic. ELB distributes inbound traffic to backends, VPN Gateway and Direct Connect build private links to on-premises networks, so they do not provide outbound internet access.
Question 50Huawei Cloud Computing Products and Solutions
A company wants to run containerized microservices with Kubernetes-native orchestration while Huawei Cloud manages the control plane. Which service matches this requirement?
- Cloud Container Engine (CCE) Correct answer.
- Bare Metal Server
- Elastic Volume Service (EVS)
- SoftWare Repository for Container (SWR)
Explanation
CCE is a managed Kubernetes service in which Huawei Cloud operates the control plane and the customer deploys workloads on node pools. SWR only stores and distributes container images, Bare Metal Server supplies physical compute, and EVS supplies block storage, so none of them provide managed Kubernetes orchestration.