Alibaba ACA-Operator Exam Practice Test Instant Access

Question 1

When using Alibaba Cloud CDN, a visitor's request will first be routed to a CDN edge node, and in the event of a cache miss at this edge node, the node will fetch data from the origin site (back-to-source request). Even with this redirection, it is possible for the origin site to see the visitor's real IP address. Which of the following statements about obtaining the visitor's real IP address are correct? (Number of correct answers: 2)

A visitor's real IP address can only be obtained by modifying the site or web application.

Bvisitor's real IP address is stored in the 'X-Forwarded-For' HTTP header. It can be directly obtained via Apache or NGINX logs.

CIn Windows, if IIS is used, after installing the 'F5XForwardedFor' extension module, the visitor's real IP address can be seen via IIS logs.

DYou can activate the 'record visitor's real IP' function in the Alibaba Cloud CDN console, then you can directly view visitor's IP addresses from the Alibaba Cloud CDN access logs.

Answer : B, C

Question 2

Which of the following descriptions of the principles of Alibaba Cloud SSL certificate private key protection is correct?

AAlibaba Cloud uses the built-in functionality of the SSL certificate service to encrypt and store the private key to ensure the security of your certificate's private key

BThe plaintext of Alibaba Cloud's private key is usually stored on disk and backed up regularly

CAlibaba Cloud Certificate Service uses symmetric encryption to save the certificate private key.

DAlibaba Cloud Certificate Service keys are loaded into memory in plaintext format ONLY when needed.

Answer : D

Question 3

A developer needs to use some sensitive business data and operational data in the process of developing a program, but the data should be protected (encrypted or anonymized) as much as possible. In order to facilitate and secure management of data encryption keys, the developer can use Alibaba Cloud Key Management Service (KMS) envelope encryption technology. Which of these statements is NOT correct, regarding KMS?

ADevelopers can generate a plaintext data key and a ciphertext data key by calling the GenerateDataKey interface.

BEnvelope encryption is an encryption mechanism similar to digital envelope technology. The technology allows you to store, transfer and use encrypted data by encapsulating their Data Keys (DKs) in an envelope, instead of \y encrypting/decrypting data directly with Customer Master Keys (CMKs).

CThe user uses the master key created on KMS to encrypt and decrypt the generated data key.

DThe master key generated by KMS is also kept by the user.

Answer : A, B, C

Question 4

Which of the following web applications are suitable for deployment on Simple Application Server (SAS), as compared with ECS? (Number of correct answers: 3)

AQuickly build a personal blog website

BQuickly build a small e-commerce website

CQuickly build serverless site using Function Compute

DSet up a NoSQL database service

EQuickly build a personal, learning, or test environment

Answer : A, B, E

https://www.alibabacloud.com/help/doc-detail/58620.htm

Question 5

Which of the following statements about ECS Snapshot is NOT correct?

AYou can manually create snapshots

BYou can create automatic snapshots

CYou can roll back a disk by using a snapshot

DYou can create an ECS instance from a snapshot

Answer : D

You can create a custom image from a snapshot that contains the operating system and data of an ECS instance. Then, you can use the custom image to create multiple instances that have identical application environments.

https://www.alibabacloud.com/help/doc-detail/25391.htm

Question 6

Which database utility is suitable for database migration?

ADMS

BDBS

CDTS

DDAS

Answer : C

https://www.alibabacloud.com/help/doc-detail/176063.htm

Question 7

Which configuration language does Terraform support?

APython