Ace Your ACP-Cloud1 Alibaba Cloud Computing Exam

Enabling SELinux on an ECS instance does not interfere with Alibaba Cloud’s ECS monitoring features. SELinux is a security module that enforces mandatory access controls on Linux systems. It operates independently from the monitoring capabilities provided by the ECS console, so ECS metrics and monitoring functions remain unaffected when SELinux is enabled.

 You can change the private IP address of an ECS instance after it is created, but you need to stop the instance first. The private IP address must be within the CIDR block of the VPC and the VSwitch that the instance belongs to. You can modify the private IP address of an instance by using the console or the API. References: 3, ACP Cloud Computing Certification - Alibaba Cloud Academy

After stopping an Alibaba Cloud Elastic Compute Service (ECS) instance, you will still be charged for some resources related to that ECS instance, such as disks, snapshots, and public IP addresses, until you release them. The charging policy depends on the billing method and network type of the ECS instance. For pay-as-you-go instances, you can choose whether to enable the No fees for stopped instances feature, which allows you to stop paying for vCPUs and memory when the instance is stopped. However, this feature is only available for VPC-connected instances in some regions1. For subscription instances, you will be charged for the entire subscription period regardless of whether the instance is running or stopped2. References:

1: Billing FAQ - Elastic Compute Service - Alibaba Cloud Documentation Center1

2: Billing overview - Elastic Compute Service - Alibaba Cloud Documentation Center2

https://cloudacademy.com/course/alibaba-security-monitoring-1275/introduction-to-cloud-monitor/#:~:text=Cloud%20Monitor%20is%20a%20service,safeguard%20your%20products%20and%20business .

Option A is correct because site monitoring is one of the functions provided by CloudMonitor. Site monitoring monitors the availability, connectivity, and domain name resolution of sites. It monitors the connectivity and response time of domain names, IP addresses, and ports, and sends alert notifications based on monitoring results1

Option B is correct because customized monitoring is one of the functions provided by CloudMonitor. Customized monitoring allows you to monitor the metrics of your own applications or services. You can use the CloudMonitor API or SDK to report custom metrics to CloudMonitor and view them on the CloudMonitor console. You can also configure alert rules for your custom metrics2

Option E is correct because cloud service monitoring is one of the functions provided by CloudMonitor. Cloud service monitoring monitors the metrics of Alibaba Cloud services, such as Elastic Compute Service (ECS), Object Storage Service (OSS), ApsaraDB for RDS, and Server Load Balancer (SLB). CloudMonitor collects the metrics of these services and displays them on the CloudMonitor console. You can also configure alert rules for these metrics2

Option C is incorrect because custom firewall is not a function provided by CloudMonitor. Custom firewall is a feature of Alibaba Cloud Security Center, which is a different service from CloudMonitor. Security Center provides security protection for your cloud resources and applications. Custom firewall allows you to customize firewall rules for your ECS instances and control the inbound and outbound traffic3

Option D is incorrect because operation auditing is not a function provided by CloudMonitor. Operation auditing is a feature of Alibaba Cloud ActionTrail, which is a different service from CloudMonitor. ActionTrail records the operations performed on your Alibaba Cloud resources and delivers the audit logs to OSS or Log Service for storage and analysis. Operation auditing helps you track the changes of your resources and comply with security standards4

References:

2: What is CloudMonitor? - CloudMonitor - Alibaba Cloud Documentation Center

1: Introduction to Cloud Monitor - Alibaba Security & Monitoring Course

3: [Security Center - Alibaba Cloud]

4: [ActionTrail - Alibaba Cloud]

Alibaba Cloud Express Connect is a service that enables high-bandwidth, reliable, secure, and private connections between different networks, such as VPC networks across regions, Alibaba Cloud accounts, and on-premise data centers1. It supports different connection methods, such as physical connections, virtual border routers, and Express Cloud Connect1.

Scenario A: Intranet communication between VPCs and Smart Access Gateway in customers different branch offices. This scenario can be achieved by using Express Cloud Connect, which is based on the hardware capacities of Smart Access Gateway and provides SD-WAN capabilities1. Express Cloud Connect allows you to connect your branch offices to Alibaba Cloud through a dedicated partner backbone network, and access VPC networks in all regions1.

Scenario B: Intranet communication between a VPC and servers in an external IDC. This scenario can be achieved by using physical connections, which are dedicated network connections between on-premise data centers and VPC networks1. You can lease a line from your ISP or work with an Alibaba Cloud partner to establish a physical connection to Alibaba Cloud1. This way, you can access VPC networks in all regions with high bandwidth and low latency1.

Scenario C: Intranet communication between two VPCs in different accounts and different CIDR Blocks. This scenario can be achieved by using peering connections, which are logical connections that enable communication between VPC networks2. Peering connections support cross-region and cross-account scenarios, and allow you to connect VPC networks with different CIDR blocks2. However, peering connections are not part of Alibaba Cloud Express Connect, but a separate service called Cloud Enterprise Network2.

Scenario D: Intranet communication between two VPCs under the same account in the same region. This scenario can also be achieved by using peering connections, which are logical connections that enable communication between VPC networks2. Peering connections support intra-region and same-account scenarios, and allow you to connect VPC networks with different CIDR blocks2. However, peering connections are not part of Alibaba Cloud Express Connect, but a separate service called Cloud Enterprise Network2. References: 1: Express Connect - Alibaba Cloud 2: Introduction to Cloud Enterprise Network - Alibaba Cloud Document Center