ACP-Cloud1 ACP Cloud Computing Certification Question and Answers

Once a VPC is created in Alibaba Cloud, its CIDR Block cannot be modified. This design ensures stability and network consistency within the VPC. To change the network range, a new VPC would need to be created with the desired CIDR Block.

=================

Using a single PUT upload through the console, the maximum file size is 5GB. For larger files, multipart uploading should be used, which allows uploads up to 5TB by splitting files into smaller parts.

Alibaba Cloud OSS provides three primary access permissions for buckets: Private, Public-read, and Public-read-write.

Private: Only the owner has access to read or write data.

Public-read: The owner can read and write, but others can only read.

Public-read-write: The bucket is fully open for reading and writing by all users.There is no Private-read permission in OSS access control options, so option A is incorrect.

SLB (Server Load Balancer) is a service that distributes network traffic across groups of backend servers to improve the service capability and application availability1. SLB supports HTTPS listeners, which allow you to encrypt the data transmission between clients and SLB instances2. HTTPS is a secure version of HTTP that uses SSL/TLS protocols to provide data encryption, integrity, and authentication3.

To use HTTPS listeners, you need to upload SSL certificates to SLB. SSL certificates are digital certificates that use public key cryptography to verify the identity of a website and encrypt the data exchanged between the website and the visitors4. There are two types of SSL certificates: server certificates and client certificates. Server certificates are issued by trusted certificate authorities (CAs) to verify the identity of the website owner and the domain name. Client certificates are issued by the website owner to verify the identity of the visitors5.

SLB supports both one-way and two-way authentication for HTTPS listeners. One-way authentication means that only the server identity is verified by the client. Two-way authentication means that both the server and the client identities are verified by each other. To use one-way authentication, you only need to upload the server SSL certificate to SLB. To use two-way authentication, you need to upload both the server SSL certificate and the client CA certificate to SLB. The client CA certificate is the root certificate or intermediate certificate of the CA that issues the client certificates.

Therefore, if you want to use SLB and ECS instances to deploy two-way authenticated HTTPS websites, you need to host server SSL certificates and client CA certificates on SLB. SLB can host both SSL certificates and CA certificates, and it supports HTTPS two-way authentication. The other statements are incorrect. References: Server Load Balancer(SLB) - Alibaba Cloud, Add an HTTPS listener - Server Load Balancer - Alibaba Cloud Documentation Center, What is HTTPS? - SSL.com, What is an SSL Certificate? - SSL.com, What is a Client Certificate? - SSL.com, [Configure two-way authentication for an HTTPS listener - Server Load Balancer - Alibaba Cloud Documentation Center]

Alibaba Cloud provides two main products for Anti-DDoS protection: Anti-DDoS Origin Service, which protects against attacks at the origin server level, and Anti-DDoS Pro Service, which offers advanced DDoS mitigation for applications hosted on Alibaba Cloud. Security Center and Cloud Firewall offer different security functionalities but do not provide direct Anti-DDoS services.

=================

By default, ECS instances in different zones within the same region are not interconnected via the Intranet. To enable communication between instances across zones, you would need to configure a VPC or use other network configurations. This setup provides isolation and flexibility in managing network traffic within different zones.

According to the Alibaba Cloud ECS documentation1, the recommended instance type for Tomcat is ecs.c5.xlarge, which has 4 vCPUs and 4 GiB of memory. This instance type is suitable for web applications that require high performance and low latency. The recommended instance type for Memcache is ecs.r5.large, which has 2 vCPUs and 16 GiB of memory. This instance type is optimized for memory-intensive applications that require high memory bandwidth and low latency. Therefore, option D is the most recommended configuration for deploying Tomcat and Memcache on two ECS instances. References: Instance type families and Alibaba Cloud Elastic Compute Service Product Introduction

When the black hole policy is triggered by excessive DDoS traffic, the affected server is temporarily isolated from the network to prevent further damage. During this period, no services are available, meaning the server cannot provide limited-speed services.

Alibaba Cloud Object Storage Service (OSS) is ideal for storing large amounts of unstructured data, such as images and videos. By migrating static files to OSS, you can free up disk space on your ECS instance, allowing you to efficiently handle storage needs as your business scales. OSS is a highly scalable and cost-effective solution for handling media files and other static assets.

=================

According to the Alibaba Cloud Academy, Auto Scaling supports three scaling modes: manual mode, scheduled task, and cloud monitor and event-triggered task. Manual mode requires manual intervention to adjust the number of ECS instances, which is not feasible and with minimum operation efforts. Scheduled task allows you to set the time and number of ECS instances to be added or removed in advance, which is suitable for predictable traffic changes. Cloud monitor and event-triggered task allows you to set the monitoring metrics and thresholds for scaling actions, which is suitable for dynamic traffic changes. Healthy check mode is not a scaling mode, but a feature of SLB to ensure the availability of ECS instances behind the load balancer. References: : ACP Cloud Computing Certification Preparation Course - Auto Scaling, : ACP Cloud Computing Certification Preparation Course - Server Load Balancer

To handle high download traffic efficiently, Company F can use Object Storage Service (OSS) to store the installation package and Content Delivery Network (CDN) to distribute it. OSS provides scalable, low-cost storage, while CDN caches content at edge nodes, reducing the load on the ECS instance and improving download speeds for users. This combination helps control bandwidth costs on ECS and provides faster download speeds by serving content closer to end-users.

When using Alibaba Cloud SLB, you can set different weights for backend ECS instances. The higher the weight of a backend ECS instance, the more load will be assigned to it. However, the load distribution is not based on the absolute value of the weight, but on the proportion of the weight in the total weight of all healthy backend ECS instances. For example, if there are two healthy backend ECS instances with weights of 100 and 200 respectively, the first instance will receive 33.3% of the load, and the second instance will receive 66.7% of the load. Therefore, to determine the load distribution of the 5 ECS instances in the question, we need to know the weight settings of the remaining 4 ECS instances. Without this information, we cannot tell what would happen. The other options are incorrect because they are based on wrong assumptions or misunderstandings of the SLB weight setting mechanism. 

For optimal use of SLB with Auto Scaling, enabling Health Check is essential to determine which instances are healthy and ready to handle traffic. SLB doesn’t require all backend servers to have the same OS, be in the same scaling group, or have identical configurations, as it can manage heterogeneous server setups within the same load-balancing group.

=================

Zones in the same region support low-latency intranet communication, ideal for high-availability deployments with inter-Zone fault isolation. Placement of ECS instances in the same or different Zones depends on the disaster recovery and latency needs of the application.

=================

Alibaba Cloud Express Connect is a service that enables high-bandwidth, reliable, secure, and private connections between different networks, such as VPC networks across regions, Alibaba Cloud accounts, and on-premise data centers1. It supports different connection methods, such as physical connections, virtual border routers, and Express Cloud Connect1.

Scenario A: Intranet communication between VPCs and Smart Access Gateway in customers different branch offices. This scenario can be achieved by using Express Cloud Connect, which is based on the hardware capacities of Smart Access Gateway and provides SD-WAN capabilities1. Express Cloud Connect allows you to connect your branch offices to Alibaba Cloud through a dedicated partner backbone network, and access VPC networks in all regions1.

Scenario B: Intranet communication between a VPC and servers in an external IDC. This scenario can be achieved by using physical connections, which are dedicated network connections between on-premise data centers and VPC networks1. You can lease a line from your ISP or work with an Alibaba Cloud partner to establish a physical connection to Alibaba Cloud1. This way, you can access VPC networks in all regions with high bandwidth and low latency1.

Scenario C: Intranet communication between two VPCs in different accounts and different CIDR Blocks. This scenario can be achieved by using peering connections, which are logical connections that enable communication between VPC networks2. Peering connections support cross-region and cross-account scenarios, and allow you to connect VPC networks with different CIDR blocks2. However, peering connections are not part of Alibaba Cloud Express Connect, but a separate service called Cloud Enterprise Network2.

Scenario D: Intranet communication between two VPCs under the same account in the same region. This scenario can also be achieved by using peering connections, which are logical connections that enable communication between VPC networks2. Peering connections support intra-region and same-account scenarios, and allow you to connect VPC networks with different CIDR blocks2. However, peering connections are not part of Alibaba Cloud Express Connect, but a separate service called Cloud Enterprise Network2. References: 1: Express Connect - Alibaba Cloud 2: Introduction to Cloud Enterprise Network - Alibaba Cloud Document Center

To improve access speeds for U.S. users, Company G can enable OSS with CDN in the West US (Silicon Valley) region. By deploying CDN in a region close to the target audience, the static content stored in OSS can be cached and delivered more efficiently. CDN caches the content at edge locations, reducing latency for users in different geographical areas. This approach is ideal for expanding the application to international markets while maintaining fast access times.

RDS for MySQL supports connections through tools that are compatible with MySQL, such as MySQL-Front, Navicat MySQL, and command-line MySQL commands. SQL Server Management Studio (SSMS) is designed for Microsoft SQL Server and is not compatible with MySQL, so option D is incorrect.

CloudMonitor allows users to create custom monitoring metrics and report data, which can then be analyzed and used for alerts. Customized monitoring is flexible, with no set limits on the number of metrics, and users can report data from Alibaba Cloud servers or other devices.

=================

To use Alibaba Cloud CDN, you must add your domain to the "CDN Domain Name List" and then modify the domain’s DNS settings to point to the CNAME provided by Alibaba Cloud. Manual cache refresh (option A) is optional and not a necessary step for initial setup, and while monitoring is useful, it is not required for CDN operation, so option D is also not essential.

OSS does not use a hierarchical structure for objects, but instead uses a flat structure. All elements are stored as objects in buckets. To use OSS in the same manner in which local file systems are used, you can configure Cloud Storage Gateway (CSG).

https://www.alibabacloud.c om/help/doc-detail/31817.htm

 The statement C is correct, because in an OSS bucket, all elements are stored as objects. An object is the basic unit of OSS storage. Each object consists of a unique key, data, and metadata. The key is the name of the object, which is used to identify the object in a bucket. The data is the content of the object, which can be any type of file, such as text, image, video, or audio. The metadata is the information about the object, such as its size, type, creation time, and custom attributes. References: = Object Storage Service:Overview - Alibaba Cloud

There is no limit on the number of objects that can be stored in a single OSS bucket in Alibaba Cloud. OSS is designed to support massive data storage, allowing users to store an unlimited number of files within a bucket. The only limitations are the bucket storage capacity and account-level quotas.

=================

After stopping an Alibaba Cloud Elastic Compute Service (ECS) instance, you will not be charged for the instance usage fee or the public bandwidth fee (if applicable) until you start the instance again. However, you will still be charged for the disk usage fee and the snapshot usage fee (if applicable) regardless of which region the instance is located in. This is because the disks and snapshots are still occupying the storage space and need to be billed accordingly. Therefore, the statement is false. References: 1 - Billing FAQ - Alibaba Cloud Document Center - What fees do I need to pay after I stop a Pay-As-You-Go instance?

In Alibaba Cloud ECS, whenever an API request is made, a unique identifier called the RequestId is generated and returned. This ID is generated regardless of the request’s success or failure. RequestId serves as a unique identifier for tracking and debugging specific requests within the ECS environment, allowing users to trace and troubleshoot individual API calls. This practice ensures that issues can be resolved more efficiently by tracking the specific request, and it is a common practice across many Alibaba Cloud services.

Alibaba Cloud Security Center is designed to enhance the security of ECS instances by providing proactive monitoring, vulnerability detection, and protection against threats such as brute-force attacks. Security Center includes features such as brute-force attack detection, which will alert you to and help mitigate potential threats to your ECS instance.

=================

A route table is a set of rules that determine how network traffic is routed within a VPC or between different network instances1. A VRouter is a hub that connects all VSwitches in the same VPC and enables communication between them2. When you create a VPC, a VRouter and a default route table are automatically created for the VPC1. The default route table contains system routes that are automatically generated by the system based on the network topology1. The system routes cannot be modified or deleted1.

However, you can also create custom route tables for your VPC and add custom routes to them1. Custom routes are manually configured by users to route traffic to specific destinations, such as other VPCs, VBRs, VPN Gateways, or NAT Gateways1. Custom routes can be modified or deleted as needed1. You can also associate VSwitches with different route tables to implement fine-grained routing control1.

Therefore, the statement that the routing entries of the route table can not be modified manually is not correct, as it only applies to system routes, not custom routes. The other statements are correct, as each VRouter may have multiple route tables, one default and several custom1; when a VPC is deleted, the corresponding route table is also deleted3; and the default route table cannot be deleted1. References: Route table overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, VRouter overview - Virtual Private Cloud - Alibaba Cloud Documentation Center, Delete a VPC - Virtual Private Cloud - Alibaba Cloud Documentation Center

The difference between public and private Server Load Balancers (SLBs) is that private SLBs connect to their backend ECS instances using the private network (Intranet) while public SLBs connect to their backend ECS instances using the public network (Internet). This is true according to the Alibaba Cloud documentation on SLB1. Public SLBs are used to distribute traffic from the Internet to ECS instances, while private SLBs are used to distribute traffic within a VPC or a classic network2. References: 1: Server Load Balancer - Alibaba Cloud Documentation Center 2: Create a Server Load Balancer instance - Server Load Balancer - Alibaba Cloud Documentation Center

OSS logging is a feature that allows you to record the access requests to your OSS buckets. You can enable and configure logging for a bucket in the OSS console or by using the OSS API. When logging is enabled for a bucket A, OSS automatically generates access log objects every hour and stores them in a specified bucket B. The log objects follow a predefined naming convention that includes the source bucket name, the date, the hour, and a unique string.

The documentation also states that buckets A and B can be separate buckets or the same bucket, but they must belong to the same user1. This means that you cannot store the access logs of one user’s bucket in another user’s bucket. Therefore, the correct answer is A.

References:

1: Logging - Object Storage Service - Alibaba Cloud Documentation Center

A. Management and maintenance: To prevent emergent service termination, users need to know the underlying detail like how the data is archived in the resource pool. This is incorrect because cloud storage is designed to abstract the underlying details of how the data is stored and managed from the users. Users do not need to worry about the hardware, software, or network issues that may affect the data availability or reliability. The cloud storage provider is responsible for maintaining and managing the storage infrastructure and ensuring the service continuity1.

B. Service on demand Cloud storage has a huge resources pool, users can apply for and use the resources on demand. This is correct because cloud storage is based on the cloud computing model of service on demand, which means that users can request and access the storage resources as needed, without having to purchase or provision them in advance. Cloud storage providers offer flexible pricing models that allow users to pay only for the storage they use2.

C. High reliability and availability: Provides very high reliability and availability through technologies like 3 redundant copies, automatic failure recovery, etc. This is correct because cloud storage uses various technologies and methods to ensure that the data stored in the cloud is always accessible and durable. For example, cloud storage providers typically replicate the data across multiple servers, regions, or zones to prevent data loss due to hardware failure, natural disaster, or human error. Cloud storage providers also use automatic failure recovery mechanisms to detect and repair any issues that may affect the data integrity or availability3.

D. Ultra-large scale: Data storage can reach TB or even PB level. This is correct because cloud storage can handle massive amounts of data, ranging from terabytes (TB) to petabytes (PB) or even exabytes (EB). Cloud storage providers have the infrastructure and expertise to scale up the storage capacity and performance to meet the growing data needs of users. Cloud storage can support various types of data, such as structured, unstructured, or semi-structured data, and various use cases, such as data backup, data archiving, data analytics, or data sharing.

E. Transparent service: Provides the service through a single SDK. This is incorrect because cloud storage is not a transparent service, but a service that requires users to interact with it through a specific interface or protocol. Cloud storage providers usually offer different types of storage services, such as object storage, block storage, or file storage, each with its own characteristics and features. Users need to choose the appropriate storage service for their data and use the corresponding software development kit (SDK), application programming interface (API), or command-line interface (CLI) to access and manipulate the data.

F. High scalability Storage capacity can be dynamically scaled to meet the needs. This is correct because cloud storage is highly scalable, meaning that users can increase or decrease the storage capacity according to their data needs. Cloud storage providers offer elastic storage services that can automatically adjust the storage resources based on the demand, without requiring users to manually provision or deprovision them. Cloud storage also allows users to scale the storage performance, such as throughput, latency, or bandwidth, to optimize the data access and transfer.

References: 1: What is Cloud Storage? - Cloud Storage Explained - AWS 2: What is Cloud Storage & How Does it Work? | Google Cloud 3: Cloud Storage Reliability and Availability | Cloud Storage Documentation : What is Cloud Storage? - Definition from Techopedia : Cloud Storage Types: Object, Block, and File | IBM : Cloud Storage Scalability | Cloud Storage Documentation

The ossbrowser is a graphical tool provided by Alibaba Cloud for uploading and downloading files in OSS, offering an intuitive interface for managing objects. Other tools like ossutil and osscmd are command-line tools, while ossfs is used to mount OSS as a file system on Linux, not a graphical tool.

In Alibaba Cloud RDS, read-only instances are synchronized from the master instance but do not allow actions such as creating or deleting databases, configuring backup policies, or changing account authorizations. However, you can configure the read-only instance’s whitelist to control access.

When forwarding layer 7 (HTTP) requests, Alibaba Cloud SLB preserves the client’s real IP address by including it in the X-Forwarded-For header. This allows the backend ECS instance to access the client’s actual IP rather than the SLB’s IP address. This practice is common for maintaining accurate client IP information in HTTP forwarding scenarios.

Not all upload methods in Alibaba Cloud OSS support resuming from a breakpoint. Only specific methods, such as multipart upload, support this feature. Small files can be uploaded using a single PUT request, while APPEND is useful for continuously updated log files. For large files, multipart uploading is recommended to handle potential interruptions.

Alibaba Cloud OSS offers Server Side Encryption to protect data at rest, enhancing security. It also supports multi-region replication with Primary/Secondary region configurations for additional data reliability and disaster recovery. Anti-DDoS is not an inherent feature of OSS, and multi-user isolation is achieved via Alibaba Cloud’s Resource Access Management (RAM).

=================

Alibaba Cloud RDS automatically deploys instances in master-slave mode (high availability) without additional configuration or charges. This ensures data redundancy and disaster recovery by maintaining synchronous data replication from the master to the slave instance.

Alibaba Cloud Object Storage Service (OSS) is a cloud storage service that allows you to store, retrieve, and manage data in the cloud. OSS provides multiple file uploading modes for different scenarios, such as simple upload, multipart upload, append upload, resumable upload, and cross-region replication. These uploading modes can be implemented by using the API or the SDK provided by OSS. Therefore, options B and D are the correct answers. Option A is not correct because the OSS management console only supports simple upload for files that are smaller than 5 GB. Option C is not correct because OSS does not support directly copying to/from OSS using portable disks. References: Object Storage Service:Simple upload, Object Storage Service:Multipart upload, Object Storage Service:OSS tools

Alibaba Cloud ECS allows users to set an auto-release time for Pay-As-You-Go instances, giving flexibility in handling temporary workloads without manually releasing instances. Notably, the auto-release time can be adjusted multiple times even after the instance has been created, allowing for modifications as business needs change. This feature provides a convenient way to manage costs by automatically releasing instances when they are no longer needed. However, once the auto-release time is set, it must be adjusted or canceled if changes are required.

Alibaba Cloud provides two main options for securely connecting a VPC with a traditional IDC: VPN (Virtual Private Network) and a dedicated leased line connection. These methods enable stable and secure communication between the VPC and on-premises environments. HTTP agents and stepping stones (options B and C) are not standard or secure methods for IDC-VPC connectivity.

According to the Alibaba Cloud Academy, a VPC is an isolated network environment that is completely isolated from each other. Each VPC has an independent tunnel ID, and a tunnel ID corresponds to a virtualized network. This means that different VPCs cannot communicate with each other through the tunnel ID. Subnets are not divided like the traditional network environment, but rather are logical divisions of the VPC. Different cloud servers within each subnet are connected by the same router, but different subnets are interconnected by route tables, not switches. ECS instances in a VPC use security group firewalls for Layer 4 network access control, not Layer 2. The internal networks of different VPCs are completely isolated and can be interconnected through IP addresses mapped to the outside, such as NAT Gateway or EIP. References: ACP Cloud Computing Certification Preparation Course - Internetworking with VPC, Alibaba Cloud VPC User Guide

Modifying the MAC address of an ECS instance’s NIC can cause network disconnection issues because Alibaba Cloud's VPC network infrastructure relies on consistent NIC configuration. Changing the MAC address may prevent the instance from being identified correctly on the network.

=================

 Cloud Firewall is a service that provides centralized protection for your cloud assets and prevents unauthorized access to your servers. Cloud Firewall can monitor and control the inbound and outbound traffic of your servers, and block malicious requests and attacks. Cloud Firewall can also detect and prevent brute force password cracking attempts by using intelligent algorithms and threat intelligence. Therefore, option A is the correct answer. References: What is Cloud Firewall?, Protect servers from brute force attacks

 The statement A is not correct, because self-built databases do not support quick deployment and elastic scaling. On the contrary, self-built databases require hardware procurement, data center hosting, and machine deployment, which can be time consuming and costly. Moreover, self-built databases have low resource utilization, as they have to accommodate peak traffic requirements, while RDS can scale elastically according to the actual demand. References: = ApsaraDB for RDS vs. Self-built Databases - Alibaba Cloud

Alibaba Cloud OSS ensures high reliability and availability by maintaining multiple copies of data across different physical locations, allowing it to recover within minutes in the event of hardware failures. This redundancy mechanism provides strong data durability and service continuity.

To meet the company’s security requirements, the following solutions should be used together:

A. Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M. This solution can support secure remote O&M, because VPN (Virtual Private Network) is a technology that creates a secure and encrypted connection over the Internet between the bastion host and the administrator’s device. VPN can protect the data transmitted between the bastion host and the administrator from being intercepted or tampered by malicious third parties1. Alibaba Cloud provides VPN Gateway service that allows users to create VPN connections between VPCs and on-premises data centers, or between VPCs in different regions2. Users can also use VPN images from Alibaba Cloud Marketplace, such as OpenVPN, to create VPN servers on ECS instances3.

B. Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems. This solution can also support secure remote O&M, because a bastion host is a special-purpose ECS instance that acts as a proxy or a gateway for accessing other ECS instances in the VPC. A bastion host can enhance the security of the ECS instances by limiting the exposure of the ECS instances to the public network, and by implementing security policies and monitoring tools on the bastion host4. Alibaba Cloud provides Bastionhost service that allows users to centrally manage the access to cloud servers from external networks and provide secure connections to VPC resources5.

C. Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups. This solution can isolate the networks between subsystems, because a security group is a virtual firewall that controls the inbound and outbound traffic of the ECS instances in the group. Users can configure security group rules to allow or deny access based on the network protocol, port, and source IP address. By deploying ECS instances running different subsystems to independent security groups, users can prevent unauthorized access or communication between the subsystems6.

The other solution is not suitable for the company’s scenario, for the following reason:

D. Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups. This solution cannot isolate the networks between subsystems, because ECS instances in the same security group can communicate with each other by default, regardless of whether they have intranet or internet IP addresses. Moreover, this solution may also prevent the ECS instances from accessing the internet or providing external services, which may affect the business operation of the company6.

References: What is a VPN? - Virtual Private Network - Cisco, VPN Gateway - Alibaba Cloud, OpenVPN - Alibaba Cloud Marketplace, Bastion Host - Alibaba Cloud Document Center, Bastionhost - Alibaba Cloud, Security groups - Elastic Compute Service - Alibaba Cloud

In Alibaba Cloud SLB, Layer-7 (HTTP/HTTPS) services require enabling the "X-Forwarded-For" header to retrieve the real IP address of clients, while Layer-4 (TCP/UDP) services can obtain the real IP address directly without additional settings.

=================

The maximum number of connections to an RDS instance primarily depends on the memory size of the instance. Higher memory capacity allows for more simultaneous connections, as memory is a key resource in managing and maintaining connections. Alibaba Cloud RDS scales the connection limit based on the instance's memory allocation to ensure stable database performance.

Option B is correct because using Server Load Balancer (SLB) and adding additional ECS instances can help to distribute the traffic among multiple servers and improve the availability and scalability of the platform. SLB can also provide health checks and fault tolerance for the ECS instances1

Option D is correct because replacing the self-built MySQL database with ApsaraDB for RDS can provide better database performance, security, and reliability. ApsaraDB for RDS is a fully managed cloud database service that supports MySQL, SQL Server, PostgreSQL, and other engines. It can automatically handle tasks such as backup, recovery, monitoring, and patching. Using RDS read-only instances can also handle read-only requests and reduce the load on the primary database2

Option A is incorrect because importing database data into Object Storage Service (OSS) will not share the storage pressure on the platform. OSS is a cloud storage service that provides high durability, availability, and scalability for storing unstructured data such as images, videos, and documents. It is not suitable for storing structured data such as database tables. Moreover, importing data into OSS will incur additional costs and latency3

Option C is incorrect because using Content Delivery Network (CDN) will not enhance the content loading speed of the platform. CDN is a distributed network that delivers content to users based on their geographic locations, the origin of the content, and the content delivery server. It is mainly used to accelerate the delivery of static content such as images, videos, and scripts. It is not effective for dynamic content such as database queries and transactions4

References:

1: Server Load Balancer - Alibaba Cloud

2: ApsaraDB for RDS - Alibaba Cloud

3: Object Storage Service - Alibaba Cloud

4: Content Delivery Network - Alibaba Cloud

Alibaba Cloud Auto Scaling ensures transaction completeness during scaling activities. If the intended number of ECS instances cannot be added to the scaling group, Auto Scaling rolls back the entire activity, releasing any partially added instances. This behavior prevents incomplete scaling activities, ensuring the scaling action either fully succeeds or is reverted entirely.

For a service focused on storing and providing fast access to a massive amount of images, the team should use:

Object Storage Service (OSS): For scalable and cost-effective storage of large image datasets.

Elastic Compute Service (ECS): For running the application’s backend and API logic.

Content Delivery Network (CDN): To cache and accelerate image delivery globally, improving access speed for users worldwide.While Auto Scaling is useful for applications with highly variable compute demands, it is not essential for this setup based on the described requirements.

In Alibaba Cloud OSS, a bucket cannot be deleted until all contents, including files and incomplete multipart upload segments, are removed. This prevents accidental data loss by ensuring no objects remain in the bucket before deletion.