100% Alibaba Cloud CAP-C01 Guaranteed Success With Testing Engine

Alibaba Cloud CAP-C01 Exam Overview:

Alibaba Cloud CAP-C01 Exam Syllabus Topics:

Alibaba Cloud Certified Professional: Cloud Architect Sample Questions:

Question #1
Belinda is designing an API-driven cloud communications platform. The application is hosted on Elastic Compute Service (ECS) instances behind a Network Load Balancer (NLB). It leverages API Gateway to serve public-facing APIs to customers. For security reasons, Belinda wants to protect the platform against web exploits like SQL injection and large, sophisticated DDoS attacks.
Which combination of solutions provides the MOST protection? (Correct answers: 2)

A. Use Alibaba Cloud Web Application Firewall (WAF) to protect the NLB.
B. Use Alibaba Cloud Security Center with Anti-DDoS Basic.
C. Use Alibaba Cloud Anti-DDoS Proxy to protect the NLB.
D. Use Alibaba Cloud Web Application Firewall (WAF) to protect API Gateway.

Question #2
Paul runs a successful online game. The game is deployed as a three-tier architecture in a VPC with ApsaraDB RDS for MySQL at the database layer. The game allows players to compete in real-time, and Paul wants to display a top-10 scoreboard in near-real time.
As a Cloud Architect, which of the following solutions would you propose for Paul ' s use case?

A. Set up an Alibaba Cloud ApsaraDB for PostgreSQL cluster to cache the scores for the web application to display.
B. Place an Alibaba Cloud CDN distribution in front of the web application to cache the scoreboard in a section of the application.
C. Set up an Alibaba Cloud Tair (Redis OSS-Compatible) cluster to compute and cache the scores for the web application to display.
D. Create a read replica in ApsaraDB for RDS MySQL to run queries to compute the scoreboard and serve the read traffic to the web application.

Question #3
Priya is building a remote office application, and is looking for a storage solution to go with it. The solution must be highly available and scalable, and must be able to function as a file system that can be mounted to multiple Linux instances on Alibaba Cloud, as well as on-prem machines using native protocols such as Network File System (NFS) or Server Message Block (SMB).
For ease of use, Priya has set up a VPN Gateway between their network and their application ' s VPC on Alibaba Cloud.
Which of the following storage solutions meets this requirement?

A. Object Storage Service (OSS) with buckets deployed in multiple regions
B. Elastic Block Storage (EBS) disks attached to Elastic Compute Service (ECS) instances serving as proxies
C. File Storage NAS with single mount points
D. File Storage NAS with multiple mount points

Question #4
Kenneth plans to deploy a real-time data processing platform on Alibaba Cloud to support his company ' s Internet-of-Things (IoT) business. The platform will handle millions of sensor data points collected from smart devices globally. Kenneth needs to ensure high throughput and low latency for data ingestion and analysis.
Which solutions should Kenneth consider integrating into the platform architecture to meet his expected performance requirements? (Correct answers: 3)

A. Implement Alibaba Cloud Elastic MapReduce (EMR) for batch processing of large datasets.
B. Store time-series data in Alibaba Cloud ' s Time Series Database.
C. Use ApsaraMQ for Kafka for high-throughput data streaming.
D. Deploy Function Compute to process data in real time as it arrives.

Question #5
A Cloud Architect is designing a two-tiered architecture that includes a public vSwitch and a database vSwitch. The web servers in the public vSwitch must be open to the Internet on port 443. The ApsaraDB RDS for MySQL instance in the database vSwitch must be accessible only to the web servers on port 3306.
Which combination of actions should the Cloud Architect take to meet these requirements? (Correct answers:
2)

A. Create a security group for the RDS instance. Add a rule to deny all traffic except traffic from the web servers ' security group on port 3306.
B. Create a security group for the web servers in the public vSwitch. Add a rule to allow traffic from
0.0.0.0/0 on port 443.
C. Create a security group for the RDS instance. Add a rule to allow traffic from the web servers ' security group on port 3306.
D. Create a network ACL for the public vSwitch. Add a rule to deny outbound traffic to 0.0.0.0/0 on port
3306.
E. Create a security group for the RDS instance. Add a rule to allow traffic from the public vSwitch CIDR block on port 3306.

Solutions: