01. Which service provides centralized access management and permission control for Alibaba Cloud resources?
a) Cloud Firewall
b) RAM (Resource Access Management)
c) SLB
d) KMS
02. Which of the following are effective techniques for protecting ECS instances?
(Choose two)
a) Assigning root-level RAM policies to all users
b) Enabling Security Center with baseline checks
c) Limiting open ports via security groups
d) Using unrestricted CIDR blocks (e.g., 0.0.0.0/0) for all ports
03. Which of the following services is used to manage and scale block storage for ECS instances?
a) Object Storage Service (OSS)
b) Network Attached Storage (NAS)
c) Elastic Block Storage (EBS)
d) CDN
04. Which component in Alibaba Cloud can be used to create customized routing logic between VPCs in different regions?
a) VRouter
b) VSwitch
c) NAT Gateway
d) CEN Transit Router
05. Which strategies enhance application performance and availability in Alibaba Cloud?
(Choose two)
a) Using SLB across zones
b) Deploying applications on a single ECS instance
c) Setting up OSS versioning
d) Implementing Auto Scaling
06. Which CDN capabilities help improve website availability and performance?
(Choose two)
a) DDoS protection at Layer 4
b) Origin fetch optimization
c) Intelligent caching
d) VPC isolation
07. A healthcare organization is deploying its patient management system on Alibaba Cloud. They require:
- Secure, private connectivity between their on-premises servers and Alibaba Cloud VPCs.
- Automated failover to ensure connectivity during outages.
- Scalable bandwidth to handle varying data loads without manual intervention.
Which Alibaba Cloud service should the organization implement to meet these requirements?
a) Cloud Storage Gateway
b) Cloud Enterprise Network (CEN)
c) VPC peering
d) Express Connect with redundant connections
08. An application that runs on Elastic Compute Service (ECS) is configured with an Elastic IP address. The ECS is deployed in VPC-1A. The application reads data from a databased deployed under the same Alibaba Cloud account, in VPC-2C.
What is the MOST secure way for the application to access the database?
a) Create a security group for the database that allows all traffic from the public IP address of the ECS in VPC-1A.
b) Make the database instance publicly accessible over the Internet via a public IP address.
c) Configure VPC peering between VPC-1A and VPC-2C.
d) Launch an ECS instance in VPC-2C and proxy all requests through the new ECS instance.
09. An insurance company is implementing a new compliance requirement for their services that are deployed on Alibaba Cloud. This new requirement requires them to monitor and manage access logs across all services.
Which services and configurations should they use to fulfill this requirement?
(Choose three)
a) Use CloudMonitor to monitor service usage and alert on high utilization rates.
b) Enable ActionTrail to track account activity and log API calls across Alibaba Cloud services.
c) Integrate Resource Access Management (RAM) to enforce and audit access controls.
d) Use Simple Log Service to collect, process, and analyze access logs in real time.
10. A streaming service plans to migrate their services to Alibaba Cloud, while improving the quality and performance during peak hours. Which combination of services would BEST fit their requirements?
(Choose all that apply)
a) Use Tair (Redis® OSS-Compatible) to create a cache for back-to-origin content
b) Implement Auto Scaling policies to adjust server capacity dynamically based on user traffic
c) Use Alibaba Cloud CDN to cache video content at PoPs close to viewers
d) Store content in Object Storage Service (OSS) and replicate content across all regions
We have prepared Alibaba Cloud Professional Cloud Architect (CAP-C01) certification sample questions to make you aware of actual exam properties. This sample question set provides you with information about the ACP Cloud Architect exam pattern, question formate, a difficulty level of questions and time required to answer each question. To get familiar with Alibaba Cloud Certified Professional - Cloud Architect exam, we suggest you try our Sample Alibaba CAP-C01 Certification Practice Exam in simulated Alibaba certification exam environment.