Instantly download CAP-C01 training test engine

A company has a web server running on an Elastic Compute Service (ECS) instance that is bound with an Elastic IP address. The ECS instance resides in a default security group within a VPC. The network ACL has been modified to block all traffic. Keran is a Cloud Architect and has been assigned the task of making the web server accessible from everywhere on port 443.
Which combination of steps can Keran take to accomplish this task? (Correct answers: 2)

• A. Create a security group rule to allow TCP port 443 from source 0.0.0.0/0.
• B. Update the network ACL to allow TCP port 443 from source 0.0.0.0/0.
• C. Update the network ACL to allow inbound TCP port 443 from source 0.0.0.0/0 and outbound TCP ports 1024-65535 to destination 0.0.0.0/0.
• D. Create a security group rule to allow TCP port 443 to destination 0.0.0.0/0.
• E. Update the network ACL to allow inbound/outbound TCP port 443 from source 0.0.0.0/0 and to destination 0.0.0.0/0.

Yolanda works for a software company that serves customers all around the globe. They want to ensure that all communications between users and the application are encrypted. They also want to automate the deployment of SSL/TLS certificates across multiple backend servers to streamline operations and maintain high security standards.
Which combination of Alibaba Cloud services should the company implement to achieve this goal MOST effectively? (Correct answers: 2)

• A. Web Application Firewall (WAF)
• B. Key Management Service (KMS)
• C. Alibaba Cloud CDN with HTTPS enabled
• D. Certificate Management Service
• E. Server Load Balancer (SLB) with SSL offloading

Sandra hosts a web application on a single ECS instance that stores documents uploaded by users in an EBS data disk. As the requirements grow, they duplicate the application and host it in a second ECS instance in a different zone. An ALB instance is used to distribute traffic between these ECS instances. However, after completing this change, users reported that every time they access the web application, they could only see some of their documents at any given time, but never all of the documents at the same time.
As a Cloud Architect, how would you solve this issue?

• A. Copy the data from both EBS data disks to File Storage NAS, then set up the two ECSs to save new documents to File Storage NAS.
• B. Configure the ALB to send requests to both ECS servers to retrieve the full list of documents.
• C. Configure the ALB to always route requests of a particular user to the same ECS to ensure their documents are all stored on the same EBS data disk.
• D. Periodically copy data between both EBS data disks so that the data between both data disks are consistent.

A healthcare organization is deploying its patient management system on Alibaba Cloud. They require:
* Secure, private connectivity between their on-premises servers and Alibaba Cloud VPCs.
* Automated failover to ensure connectivity during outages.
* Scalable bandwidth to handle varying data loads without manual intervention.
Which Alibaba Cloud service should the organization implement to meet these requirements?

• A. NAT Gateway
• B. VPC peering between VPCs
• C. VPN Gateway
• D. Express Connect with Redundant Connections

An application runs on an Elastic Compute Service (ECS) with an Elastic IP address in VPC A within Alibaba Cloud. The application requires access to a database in VPC B. Both VPCs are in the same Alibaba Cloud account.
Which of the following solutions will provide the required access MOST securely?

• A. Launch an ECS instance with an Elastic IP address into VPC B. Proxy all requests through the new ECS instance.
• B. Configure a VPC peering connection between VPC A and VPC B.
• C. Create a security group for the database that allows all traffic from the public IP address of the application server in VPC A.
• D. Make the database instance publicly accessible. Assign a public IP address to the database instance.