I85PREP
⌘ K
NIFCLOUD Certified Associate study materials
NIFCLOUD Certified Associate study resources

NIFCLOUD Certified Associate practice questions

One question at a time. Build your NIFCLOUD Certified Associate understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1NIFCLOUD fundamentals and service overview

Which NIFCLOUD compute service provides virtual servers that a user configures with a chosen OS image, CPU, and memory size?

  1. NIFCLOUD DNS
  2. NIFCLOUD NAS
  3. NIFCLOUD Object Storage
  4. NIFCLOUD Computing Correct answer.

Explanation

NIFCLOUD Computing is the IaaS virtual server offering; users select an OS image and a resource menu (CPU, memory) when creating an instance. The other listed services are storage and name-resolution products rather than virtual machine compute.

Question 2NIFCLOUD fundamentals and service overview

A team needs block storage volumes that can be attached to a NIFCLOUD Computing instance and sized independently of the instance's local disk. Which service should they choose?

  1. NIFCLOUD Message Queue
  2. NIFCLOUD Disk Correct answer.
  3. NIFCLOUD CDN
  4. NIFCLOUD Object Storage

Explanation

NIFCLOUD Disk supplies additional block-level volumes that are attached to Computing instances and managed separately from the instance's own storage. Object Storage is HTTP-based object storage, while CDN and Message Queue serve delivery and messaging roles.

Question 3NIFCLOUD fundamentals and service overview

Which NIFCLOUD service is designed to store and retrieve arbitrary objects such as images and backups through an HTTP-based API with bucket-level management?

  1. NIFCLOUD VPN Gateway
  2. NIFCLOUD Disk
  3. NIFCLOUD Computing
  4. NIFCLOUD Object Storage Correct answer.

Explanation

NIFCLOUD Object Storage organizes data into buckets and exposes it through an HTTP API, making it suitable for unstructured content such as images and backups. The other options are block storage, compute, and network connectivity services.

Question 4NIFCLOUD fundamentals and service overview

What is the primary purpose of a NIFCLOUD private LAN (private network) attached to Computing instances?

  1. To let instances communicate over an isolated internal network segment Correct answer.
  2. To cache content at edge locations
  3. To publish static websites to the public internet
  4. To store snapshots of disk volumes

Explanation

A private LAN creates an isolated network segment inside the cloud so instances can communicate privately, typically while only selected resources face the internet. Publishing websites, edge caching, and snapshot storage are handled by other services.

Question 5NIFCLOUD fundamentals and service overview

Which NIFCLOUD capability lets an operator increase a running Computing instance's CPU or memory by moving it to a larger resource menu?

  1. Firewall rule duplication
  2. Bucket policy change
  3. DNS record update
  4. Instance type (resource menu) change Correct answer.

Explanation

NIFCLOUD Computing instances are defined by a resource menu that fixes CPU and memory; changing to a different menu resizes the instance, which typically requires a stop and restart. Bucket policies, DNS records, and firewall rules do not alter compute capacity.

Question 6NIFCLOUD fundamentals and service overview

A company wants a managed relational database in NIFCLOUD rather than running a database on its own Computing instance. Which service fits?

  1. NIFCLOUD Load Balancer
  2. NIFCLOUD Database (DB Service) Correct answer.
  3. NIFCLOUD Object Storage
  4. NIFCLOUD Monitoring Suite

Explanation

The managed database service lets customers run relational database engines without administering the underlying server OS. Object Storage, Load Balancer, and Monitoring Suite address storage, traffic distribution, and observability instead.

Question 7NIFCLOUD fundamentals and service overview

Which NIFCLOUD service distributes incoming traffic across multiple Computing instances to improve availability?

  1. NIFCLOUD Bastion (VPN) Server
  2. NIFCLOUD Load Balancer Correct answer.
  3. NIFCLOUD DNS
  4. NIFCLOUD NAS

Explanation

A load balancer spreads client requests over several backend instances so that a single failure does not take the service down. NAS provides shared files, DNS resolves names, and a bastion server provides administrative access.

Question 8NIFCLOUD fundamentals and service overview

An administrator needs shared file storage that several Computing instances can mount simultaneously over the network. Which NIFCLOUD service is intended for this?

  1. NIFCLOUD Object Storage
  2. NIFCLOUD Archive Storage
  3. NIFCLOUD Disk
  4. NIFCLOUD NAS Correct answer.

Explanation

NIFCLOUD NAS offers network-attached file storage that multiple servers can mount at once, which suits shared content and clustered workloads. Disk is single-attach block storage, while Object Storage and Archive Storage use an object API.

Question 9NIFCLOUD fundamentals and service overview

Which NIFCLOUD feature keeps a point-in-time copy of a Disk volume so it can be restored later?

  1. Disk snapshot Correct answer.
  2. Elastic IP
  3. Private LAN
  4. Firewall

Explanation

A snapshot captures the state of a Disk volume at a point in time and can be used to create a new volume for restore or cloning. Private LAN, firewall, and Elastic IP are networking constructs and do not copy data.

Question 10NIFCLOUD fundamentals and service overview

A web application must be reachable at a stable public IPv4 address that survives instance rebuilds. Which NIFCLOUD resource should be assigned?

  1. Elastic IP address Correct answer.
  2. Object Storage bucket name
  3. NAS mount point
  4. Private LAN address

Explanation

An Elastic IP is a fixed public address that can be associated with an instance and re-associated if the instance is replaced, so clients keep the same endpoint. Private LAN addresses are internal, and mount points and bucket names are not routable addresses.

Question 11NIFCLOUD fundamentals and service overview

Which NIFCLOUD service lets an organization register and manage domain names and their DNS records?

  1. NIFCLOUD VPN Gateway
  2. NIFCLOUD Load Balancer
  3. NIFCLOUD DNS Correct answer.
  4. NIFCLOUD Monitoring Suite

Explanation

NIFCLOUD DNS provides authoritative name resolution and record management for domains, including records that point at cloud resources. The other services handle traffic distribution, encrypted connectivity, and monitoring.

Question 12NIFCLOUD fundamentals and service overview

Which NIFCLOUD offering caches content at edge locations so that users download it with lower latency?

  1. NIFCLOUD Disk
  2. NIFCLOUD NAS
  3. NIFCLOUD CDN Correct answer.
  4. NIFCLOUD Database

Explanation

A content delivery network stores copies of content at geographically distributed edge nodes, shortening the path to end users. NAS, Disk, and Database are origin-side storage and data services without edge caching.

Question 13NIFCLOUD fundamentals and service overview

Which NIFCLOUD service is used to run batch-style jobs or scheduled scripts on managed compute capacity without the operator patching the OS?

  1. NIFCLOUD DNS
  2. NIFCLOUD NAS
  3. NIFCLOUD Batch Correct answer.
  4. NIFCLOUD Computing

Explanation

NIFCLOUD Batch is a managed job execution service in which the provider handles the underlying servers, so users submit jobs rather than maintain instances. Computing gives raw virtual servers that the customer must patch themselves.

Question 14NIFCLOUD fundamentals and service overview

A team must connect its on-premises data center to a NIFCLOUD private LAN over an encrypted tunnel across the internet. Which service should be used?

  1. NIFCLOUD VPN Gateway Correct answer.
  2. NIFCLOUD Object Storage
  3. NIFCLOUD Load Balancer
  4. NIFCLOUD Elastic IP

Explanation

A VPN Gateway terminates an encrypted IPsec-style tunnel between the customer site and the cloud private network, avoiding dedicated circuit provisioning. Load Balancer, Elastic IP, and Object Storage do not create site-to-site encrypted links.

Question 15NIFCLOUD fundamentals and service overview

Which NIFCLOUD service provides a hardened jump host for administrators to reach private instances securely?

  1. NIFCLOUD NAS
  2. NIFCLOUD Batch
  3. NIFCLOUD CDN
  4. NIFCLOUD Bastion (VPN) Server Correct answer.

Explanation

The bastion offering gives a managed entry point, with VPN capability, through which administrators access instances on a private LAN without exposing them publicly. CDN, Batch, and NAS do not provide administrative access paths.

Question 16NIFCLOUD fundamentals and service overview

Which NIFCLOUD service collects metrics and raises alerts about the health of Computing instances and other resources?

  1. NIFCLOUD Disk
  2. NIFCLOUD Load Balancer
  3. NIFCLOUD Monitoring Suite Correct answer.
  4. NIFCLOUD DNS

Explanation

The monitoring suite gathers resource metrics and supports alerting so operators can react to thresholds and failures. DNS, Disk, and Load Balancer are functional services that do not themselves provide cross-resource observability.

Question 17NIFCLOUD fundamentals and service overview

Which NIFCLOUD service provides a managed message queue for decoupling application components?

  1. NIFCLOUD VPN Gateway
  2. NIFCLOUD NAS
  3. NIFCLOUD DNS
  4. NIFCLOUD Message Queue Correct answer.

Explanation

A managed queue lets producers and consumers communicate asynchronously, absorbing bursts and decoupling tiers. NAS, VPN Gateway, and DNS provide storage, connectivity, and name resolution rather than messaging.

Question 18NIFCLOUD fundamentals and service overview

An application stores rarely accessed compliance records that must be retained for years at low cost. Which NIFCLOUD service best matches this requirement?

  1. NIFCLOUD Disk
  2. NIFCLOUD Database
  3. NIFCLOUD Archive Storage Correct answer.
  4. NIFCLOUD NAS

Explanation

Archive Storage is intended for long-term retention of data that is seldom read, trading retrieval latency for lower cost. Disk, NAS, and Database are priced and designed for active workloads rather than archival retention.

Question 19NIFCLOUD fundamentals and service overview

Which statement best describes the NIFCLOUD shared responsibility model for a Computing instance?

  1. NIFCLOUD secures the physical facilities and hypervisor while the customer secures the guest OS and applications Correct answer.
  2. NIFCLOUD and the customer each secure half of the guest OS configuration
  3. NIFCLOUD secures the guest OS and applications while the customer secures the data center
  4. The customer is responsible for physical security of the racks hosting the instance

Explanation

In the shared model the provider owns facilities, hardware, and virtualization, and the customer owns everything from the guest operating system upward, including patching and application security. Responsibility is split by layer, not by halves of a single layer, and customers never secure provider racks.

Question 20NIFCLOUD fundamentals and service overview

A workload must remain available if one zone fails. Which design choice aligns with NIFCLOUD's zone structure?

  1. Deploy all instances in a single zone behind one firewall
  2. Place all instances on one private LAN segment in one zone
  3. Deploy instances and a load balancer across multiple zones Correct answer.
  4. Rely on disk snapshots taken in the same zone as the only recovery path

Explanation

NIFCLOUD zones are isolated failure domains, so spreading instances across zones and fronting them with a load balancer removes a single point of failure. Concentrating everything in one zone, or depending only on same-zone snapshots, leaves the service exposed to a zone outage.

Question 21NIFCLOUD fundamentals and service overview

Which NIFCLOUD firewall capability controls traffic reaching a Computing instance?

  1. Bucket ACLs applied to stored objects
  2. Disk snapshot schedules
  3. Packet filtering rules applied to the instance's network interface Correct answer.
  4. DNS record TTL values

Explanation

Firewall rules on the instance's network interface permit or deny traffic by protocol, port, and source, forming the primary network access control. Bucket ACLs govern object storage access, TTL affects caching of DNS answers, and snapshot schedules govern backups.

Question 22NIFCLOUD fundamentals and service overview

What does an SSH key pair provide when creating a NIFCLOUD Computing instance?

  1. A token used to authenticate API requests to Object Storage
  2. An encryption key that scrambles the instance's disk automatically
  3. A public key installed on the instance so the holder of the private key can log in Correct answer.
  4. A license key that unlocks additional CPU capacity

Explanation

The public key is placed on the instance at creation, and the matching private key proves the administrator's identity at login, avoiding password-based access. It does not license capacity, encrypt disks by itself, or authenticate storage API calls.

Question 23NIFCLOUD fundamentals and service overview

An operator wants to automate creation of many identical Computing instances from the command line. Which NIFCLOUD capability should be used?

  1. The NIFCLOUD API with an API key Correct answer.
  2. Email requests to support for each instance
  3. Editing DNS zone files to declare servers
  4. Manual console clicks repeated per instance

Explanation

The NIFCLOUD API exposes programmatic operations authenticated with API keys, which is the basis for scripting repeatable provisioning. Manual clicks do not scale, support does not provision on request, and DNS files cannot create servers.

Question 24NIFCLOUD fundamentals and service overview

Which pair correctly matches a NIFCLOUD service to its primary function?

  1. Batch - authoritative DNS resolution
  2. Load Balancer - long-term archival of compliance records
  3. Object Storage - durable bucket-based storage for unstructured data Correct answer.
  4. NAS - distribution of cached content to edge users

Explanation

Object Storage is the bucket-based service for unstructured data, matching the first pair. The remaining pairs swap functions: archival belongs to Archive Storage, edge caching to CDN, and name resolution to DNS.

Question 25NIFCLOUD fundamentals and service overview

Which NIFCLOUD service should be selected when a customer needs a managed Windows or Linux server with root or administrator control but no hardware management?

  1. NIFCLOUD Computing Correct answer.
  2. NIFCLOUD Message Queue
  3. NIFCLOUD CDN
  4. NIFCLOUD Object Storage

Explanation

Computing provides virtual servers on which the customer holds full OS-level administrative control while the provider manages hardware and virtualization. The other services are storage, delivery, and messaging products without an OS to administer.

Question 26NIFCLOUD fundamentals and service overview

A NIFCLOUD customer wants to programmatically provision resources and query service status from a script. Which NIFCLOUD interface is intended for this automation use case?

  1. The control panel's manual resource creation wizard
  2. The support ticket submission form
  3. The NIFCLOUD REST API, called with signed requests Correct answer.
  4. The billing statement export page

Explanation

NIFCLOUD exposes a REST API that lets scripts and tools create, modify, and inspect resources using authenticated, signed requests. This is the intended path for automation and integration with CI/CD pipelines. Interactive console pages and support channels are for humans, not programmatic control.

Question 27NIFCLOUD fundamentals and service overview

Which statement describes how NIFCLOUD's zone structure is intended to be used when designing for resilience?

  1. Zones are only billing categories and have no relationship to physical infrastructure
  2. All zones in a region share one power feed, so zone choice has no effect on availability
  3. Zones are isolated fault domains, so critical components should be spread across more than one zone Correct answer.
  4. A single zone automatically replicates every resource to all other zones without configuration

Explanation

NIFCLOUD zones are separate fault domains within a region, so placing redundant components in different zones reduces the chance that one failure takes down the whole workload. Automatic cross-zone replication is not a blanket behavior; the architect must design and configure it. Zones are physical, not merely billing labels.

Question 28NIFCLOUD fundamentals and service overview

An administrator must grant a colleague permission to manage resources in a NIFCLOUD environment without sharing the administrator's own credentials. Which NIFCLOUD capability addresses this?

  1. Creating an additional IAM user with attached policies Correct answer.
  2. Distributing the root account password to the colleague
  3. Embedding the API secret key in a public code repository
  4. Disabling authentication for the affected resources

Explanation

NIFCLOUD identity and access management lets you create separate users and attach policies that scope what each user can do. This preserves individual accountability and avoids sharing a single powerful credential. Sharing root credentials or exposing secret keys removes the audit trail and greatly increases risk.

Question 29NIFCLOUD fundamentals and service overview

Which NIFCLOUD object storage characteristic makes it suitable for storing large numbers of static assets such as images and backups?

  1. Objects are limited to the size of the instance's local ephemeral disk
  2. Objects can only be retrieved through an interactive console session
  3. Objects are stored in buckets and accessed over HTTP-based APIs rather than through a mounted block device Correct answer.
  4. Objects must be attached to a single Computing instance as a raw block device before they can be read

Explanation

NIFCLOUD object storage keeps data as objects inside buckets and exposes them through HTTP-based APIs, which suits large volumes of static content and backup data. It is not mounted as a block device and does not depend on an instance's local disk. Access is programmatic or via URL, not console-only.

Question 30NIFCLOUD fundamentals and service overview

A team needs a private network segment inside NIFCLOUD where Computing instances receive internal addresses and can communicate without traversing the public internet. Which construct provides this?

  1. A private LAN created within the service Correct answer.
  2. A DNS zone hosted in the DNS service
  3. An edge cache distribution
  4. A public IPv4 address attached to each instance

Explanation

NIFCLOUD private LANs provide an isolated network segment in which instances receive internal IP addresses and communicate privately. Public IP addresses expose instances to the internet rather than isolating them. DNS and CDN services operate at other layers and do not create the private segment.

Question 31NIFCLOUD fundamentals and service overview

Which NIFCLOUD service should be used when an application needs to send email notifications such as signup confirmations to end users?

  1. The DNS service that manages records
  2. The monitoring service that raises alerts
  3. The email delivery service for transactional messages Correct answer.
  4. The message queue service used for decoupling components

Explanation

NIFCLOUD provides an email delivery service aimed at transactional messages such as confirmations and notifications. A message queue decouples internal components but does not deliver mail to end users. Monitoring and DNS serve unrelated purposes.

Question 32NIFCLOUD fundamentals and service overview

A customer wants to run containerized microservices on NIFCLOUD without manually patching the underlying hosts. Which service type fits this requirement?

  1. A Disk volume snapshot
  2. A managed container orchestration service Correct answer.
  3. A bare-metal Computing instance with no OS
  4. A private LAN subnet

Explanation

A managed container orchestration service runs containers while the provider handles host-level maintenance, which matches the requirement to avoid manual patching. A bare-metal instance without an OS cannot run containers at all. Snapshots and subnets are supporting resources, not compute platforms.

Question 33NIFCLOUD fundamentals and service overview

Which NIFCLOUD capability allows an operator to define infrastructure such as instances and networks in a template and recreate it consistently?

  1. Manual re-entry of settings in the control panel each time
  2. A spreadsheet listing resource names
  3. An infrastructure-as-code template service Correct answer.
  4. A screenshot archive of past configurations

Explanation

An infrastructure-as-code service lets you declare resources in templates so environments can be created repeatedly and consistently. Manual re-entry is error-prone and does not scale. Documentation artifacts such as spreadsheets or screenshots describe resources but cannot provision them.

Question 34NIFCLOUD fundamentals and service overview

Which NIFCLOUD service is appropriate for analyzing large volumes of log and event data with SQL-like queries?

  1. A managed data analytics service for querying collected data Correct answer.
  2. The DNS service for name resolution
  3. The edge cache for static content
  4. The SSH gateway for administrative access

Explanation

NIFCLOUD offers a managed analytics service designed to ingest and query large datasets, including logs, using SQL-like syntax. DNS, CDN, and SSH gateway services perform entirely different functions and do not provide query engines over stored data.

Question 35NIFCLOUD fundamentals and service overview

What is the primary role of a NIFCLOUD region when a customer plans a deployment?

  1. It specifies the operating system image used by instances
  2. It sets the maximum number of IAM users allowed
  3. It determines the billing currency for the account
  4. It defines the geographic area containing the zones where resources are placed Correct answer.

Explanation

A region is the geographic grouping that contains the zones in which resources are deployed, which affects latency and data placement. Operating system images, IAM limits, and billing currency are separate settings unrelated to the region concept.

Question 36NIFCLOUD fundamentals and service overview

A workload running on Computing instances needs temporary credentials to call other NIFCLOUD APIs without storing long-term keys on disk. Which approach aligns with NIFCLOUD practice?

  1. Assign an IAM role to the instance so credentials are issued and rotated automatically Correct answer.
  2. Email the secret key to each developer who deploys the application
  3. Store the secret key in a world-readable file on the instance
  4. Hard-code a permanent access key into the application source

Explanation

Attaching an IAM role to an instance lets the platform supply short-lived credentials that are rotated automatically, removing the need to embed long-term keys. Hard-coded or widely shared keys are difficult to rotate and easy to leak. Distributing keys by email compounds the exposure.

Question 37NIFCLOUD fundamentals and service overview

Which NIFCLOUD service helps an organization discover and manage the inventory of its cloud resources across accounts?

  1. A resource management service that aggregates resource information Correct answer.
  2. The container registry
  3. The edge cache distribution
  4. The email delivery service

Explanation

NIFCLOUD provides resource management capabilities that collect and present inventory information so operators can see what exists across their environment. Email delivery, edge caching, and container registries serve delivery, performance, and image-storage purposes respectively.

Question 38NIFCLOUD fundamentals and service overview

An application must process events asynchronously so that a slow downstream component does not block the front end. Which NIFCLOUD design pattern fits?

  1. Call the downstream component synchronously and retry in a tight loop
  2. Run the downstream component on the same thread as the web request
  3. Store events only in the instance's ephemeral disk
  4. Write events to a managed queue and let a worker consume them at its own pace Correct answer.

Explanation

A managed queue decouples producers from consumers so the front end can return quickly while workers process events at their own rate. Synchronous tight-loop retries and same-thread processing keep the request blocked. Ephemeral disk is not durable and does not decouple components.

Question 39NIFCLOUD fundamentals and service overview

Which NIFCLOUD service would a team use to build a virtual private network connection between two of its own private LANs in different locations?

  1. A public IPv4 address on a single instance
  2. A DNS record set
  3. A virtual router that connects private LANs Correct answer.
  4. An edge cache distribution

Explanation

NIFCLOUD provides a virtual router capability that interconnects private LANs and can route traffic between them. A single public IP, an edge cache, and DNS records do not establish private network-to-network connectivity.

Question 40NIFCLOUD fundamentals and service overview

Which statement best describes the benefit of using a NIFCLOUD managed service instead of self-managing the equivalent software on Computing instances?

  1. The customer gains root access to the provider's hypervisor
  2. The provider handles routine maintenance tasks such as patching and failover, reducing operational burden Correct answer.
  3. The service removes all charges for the underlying resources
  4. The customer no longer needs to design for availability

Explanation

Managed services shift routine operational work such as patching, backups, and failover to the provider, freeing the customer's team for application work. Customers never receive hypervisor access, and they remain responsible for designing resilient architectures. Managed services are still billed.

Question 41Compute (virtual servers, images, networking basics)

A virtual server on NIFCLOUD is created from which of the following resources?

  1. A DNS record set registered in the private zone
  2. A disk image that defines the OS and initial volume contents Correct answer.
  3. A snapshot policy attached to a load balancer
  4. A firewall rule set stored in the network zone

Explanation

A virtual server instance is booted from an image, which carries the operating system and the initial contents of its disk. Networking, firewall, and DNS settings are attached separately and do not define the boot disk.

Question 42Compute (virtual servers, images, networking basics)

Which NIFCLOUD capability lets a running virtual server be copied to create an additional server with the same disk contents?

  1. Moving the server between availability zones while it stays online
  2. Converting the server's disk into an image and creating a new server from it Correct answer.
  3. Attaching the same additional disk to two servers simultaneously
  4. Assigning a second private IP address to the existing server

Explanation

Saving a server's disk as an image captures its contents so that new servers can be launched from that image. This is the standard way to duplicate a configured server without manual reinstallation.

Question 43Compute (virtual servers, images, networking basics)

What is the primary purpose of a private LAN attached to virtual servers in NIFCLOUD?

  1. To publish a website to anonymous external users
  2. To distribute DNS queries across multiple zones
  3. To provide internal communication between servers that is isolated from the internet Correct answer.
  4. To store disk images for long-term archival

Explanation

A private LAN gives instances an internal network segment for east-west traffic between servers. It is not directly reachable from the internet, which improves isolation and lets internal addressing be planned freely.

Question 44Compute (virtual servers, images, networking basics)

Which component must be configured before an operator can connect to a newly created virtual server over SSH from the internet?

  1. A firewall rule permitting TCP port 22 to the server Correct answer.
  2. A private CA certificate installed on the server
  3. A snapshot schedule for the server's system disk
  4. An additional disk formatted with a journaling file system

Explanation

Traffic to a server is filtered by firewall rules, so a rule allowing the SSH port toward the server is required for an external connection to succeed. Without that rule the packets are dropped before reaching the instance.

Question 45Compute (virtual servers, images, networking basics)

Which statement describes the relationship between a virtual server and its disks in NIFCLOUD?

  1. Additional disks must all be attached before the server is created
  2. The system disk is attached at creation, and additional disks can be attached afterward Correct answer.
  3. A server can only ever use the single disk created with it
  4. Disks are attached to private LANs rather than to servers

Explanation

Every instance starts with a system disk derived from its image, and further disks can be attached later to expand storage. This separation lets storage be resized or added without rebuilding the instance.

Question 46Compute (virtual servers, images, networking basics)

An administrator wants a stable public address that can be reassigned to a replacement server without changing DNS records. Which NIFCLOUD feature should be used?

  1. A static public IP address that can be attached to and detached from servers Correct answer.
  2. A dynamic address issued by the server's DHCP client
  3. A hostname alias created in the server's local hosts file
  4. A private IP address assigned from the private LAN range

Explanation

A static public IP is a reserved address that can be moved between servers, so DNS can keep pointing at the same value during replacement. Private addresses and DHCP leases are not reachable publicly and change with the instance.

Question 47Compute (virtual servers, images, networking basics)

What does the term 'zone' refer to when selecting a location for a virtual server in NIFCLOUD?

  1. A subnet range assigned to a private LAN
  2. A group of firewall rules applied to a server
  3. A logically separated data center area within a region Correct answer.
  4. A backup generation stored for a disk

Explanation

Zones are separate data center areas inside a region, and instances are placed in one of them at creation. Choosing zones deliberately supports availability and latency goals.

Question 48Compute (virtual servers, images, networking basics)

Which action changes the CPU and memory allocated to an existing virtual server?

  1. Taking a snapshot of the running server
  2. Changing the server's type (spec) to a larger configuration Correct answer.
  3. Attaching an additional disk of larger size
  4. Adding another private IP address to the server

Explanation

Compute capacity is determined by the server type, so moving to a larger type increases CPU and memory. Disks, addresses, and snapshots affect storage or networking rather than processing resources.

Question 49Compute (virtual servers, images, networking basics)

A team needs to run several identical web servers behind a load balancer. Which approach best supports repeatable deployment?

  1. Attach the same additional disk to every server so they share configuration
  2. Create a customized image from a configured server and launch additional servers from that image Correct answer.
  3. Configure each server manually after creation to keep them independent
  4. Assign the same static public IP address to every server

Explanation

Baking configuration into an image makes each new instance start in the same known state, which keeps deployments repeatable. Manual configuration drifts over time and shared disks or duplicate addresses create conflicts.

Question 50Compute (virtual servers, images, networking basics)

A database server must be reachable only from application servers on the same private LAN. Which configuration achieves this?

  1. Allow the database port only from the application servers' private addresses and deny other sources Correct answer.
  2. Allow the database port from all sources and rely on a strong password
  3. Place the database server on a separate private LAN with no firewall rules
  4. Attach a static public IP to the database server and restrict by hostname

Explanation

Firewall rules should restrict the database port to the known private addresses of the application tier. Least-privilege source filtering is what actually limits reachability, independent of authentication strength.