Question 1

Ibrahim manages a large-scale manufacturing plant equipped with state-of-the-art instrumentation andtelemetry that collects various information about the machines and products. These sensors collectivelygenerate 1 TB worth of logs each day. Each notification is approximately 2 KB in size. You have beencontracted to design a solution to ingest and store these logs for future analysis.Ibrahim wants a highly available solution, but also wants to minimize costs. Additionally, he does not want tomanage additional infrastructure. To meet their business requirements, they need to keep 14 days of dataavailable for immediate analysis, and archive any other data older than 14 days.What is the MOST operationally efficient solution that meets these requirements?

Options :

A : Use DataHub to feed alerts into Alibaba Cloud Elasticsearch and manage retention through snapshots and manual deletions.

B : Deploy ECS instances with Server Load Balancer (SLB) to ingest alerts and store them in OSS. Utilize lifecycle rules to archive data after 14 days.

C : Use Alibaba Cloud Log Service (SLS) to ingest log data, enabling real-time analysis with integrated dashboards and queries. Use SLS export features to move logs older than 14 days to Object Storage Service (OSS) with lifecycle policies to transition to Archive Storage.

D : Use Apache Kafka managed on Alibaba Cloud to connect logs from devices, feeding into SLS for realtime analysis and eventual archiving to OSS manually every 14 days.

Answer: C

Question 2

An insurance company stores critical data in an Object Storage Service (OSS) bucket. They want to protectthe data from accidental deletion.As a Cloud Architect, what do you propose that the company does to protect the data from accidental deletion?

Options :

A : Enable encryption on the OSS bucket.

B : Enable versioning on the OSS bucket.

C : Configure lifecycle policies for the objects in the OSS bucket.

D : Set the bucket ACL to " private " .

Answer: B

Question 3

A Cloud Architect is designing a two-tiered architecture that includes a public vSwitch and a databasevSwitch. The web servers in the public vSwitch must be open to the Internet on port 443. The ApsaraDB RDSfor MySQL instance in the database vSwitch must be accessible only to the web servers on port 3306.Which combination of actions should the Cloud Architect take to meet these requirements? (Correct answers:2)

Options :

A : Create a security group for the RDS instance. Add a rule to allow traffic from the web servers ' security group on port 3306.

B : Create a security group for the RDS instance. Add a rule to allow traffic from the public vSwitch CIDR block on port 3306.

C : Create a network ACL for the public vSwitch. Add a rule to deny outbound traffic to 0.0.0.0/0 on port 3306.

D : Create a security group for the RDS instance. Add a rule to deny all traffic except traffic from the web servers ' security group on port 3306.

E : Create a security group for the web servers in the public vSwitch. Add a rule to allow traffic from 0.0.0.0/0 on port 443.

Answer: A,E

Question 4

A telecommunications company is expanding its backend architecture on Alibaba Cloud to add new servicesbut needs to consolidate security management. They use multiple VPCs and want to streamline authorizationmanagement across their services.What strategy should they adopt to simplify security group management across VPCs?

Options :

A : Develop a centralized logging system for monitoring all security group activities.

B : Use basic security groups to create rules referencing other security groups, simplifying traffic control.

C : Leverage advanced security groups to contain higher IP counts across VPCs.

D : Deploy network ACLs to manage traffic at the vSwitch level instead.

Answer: B

Question 5

Sam runs a gaming startup, and is launching a real-time, massively multiplayer game on Alibaba Cloud.Based on presales numbers, the startup predicts that there will be millions of concurrent users at launch. Toensure the experience of the gamers, their architecture must be able to deliver sub-50ms latency, scaleautomatically in response to sudden player surges, and provide efficient session management for millions ofconcurrent users.What Alibaba Cloud services can Sam leverage to meet the requirements for the playerbase? (Correctanswers: 3)

Options :

A : Deploy Tair (Redis® OSS-Compatible) for low-latency session caching.

B : Store player data in ApsaraDB for MongoDB to handle unstructured data.

C : Use Alibaba Cloud CDN for static assets like game textures.

D : Enable Auto Scaling groups for ECS instances based on CPU utilization.

E : Use Application Load Balancer (ALB) to distribute traffic to game servers.

Answer: A,D,E