Alibaba Cloud CAP-C01 Exam Syllabus Topics:

Alibaba Cloud Certified Professional: Cloud Architect Sample Questions:

Question #1
Muthu is a Cloud Architect who is designing the architecture of a new application being deployed to Alibaba Cloud. The application will run on Elastic Compute Service (ECS) pay-as-you-go instances and will automatically scale across multiple zones based on load. The ECS cluster will scale in and out frequently throughout the day. An Application Load Balancer (ALB) will handle the load distribution. The architecture needs to support distributed session data management.
What should Muthu do to ensure that the architecture supports distributed session data management?

A. Use Tair (Redis OSS-Compatible) to manage and store session data.
B. Use STS (Security Token Service) for managing sessions.
C. Use CloudMonitor to manage sessions.
D. Use session stickiness of the SLB to manage session data.

Question #2
Yolanda works for a software company that serves customers all around the globe. They want to ensure that all communications between users and the application are encrypted. They also want to automate the deployment of SSL/TLS certificates across multiple backend servers to streamline operations and maintain high security standards.
Which combination of Alibaba Cloud services should the company implement to achieve this goal MOST effectively? (Correct answers: 2)

A. Alibaba Cloud CDN with HTTPS enabled
B. Web Application Firewall (WAF)
C. Server Load Balancer (SLB) with SSL offloading
D. Key Management Service (KMS)
E. Certificate Management Service

Question #3
A worldwide retail company is adapting their e-commerce platform to handle spikes in online traffic during annual sales events. They are using Alibaba Cloud services and need a solution that can automatically scale resources to maintain performance during these peaks.
What solutions should the company implement to efficiently manage their resources during high-traffic periods? (Correct answers: 3)

A. Host static images and videos on Object Storage Service (OSS) and configure acceleration with Alibaba Cloud CDN.
B. Implement Function Compute to handle additional processing demands dynamically.
C. Deploy Auto Scaling to automatically scale ECS instances horizontally based on traffic.
D. Set up Application Load Balancer (ALB) to distribute incoming traffic evenly across resources.

Question #4
A Cloud Architect is designing a two-tiered architecture that includes a public vSwitch and a database vSwitch. The web servers in the public vSwitch must be open to the Internet on port 443. The ApsaraDB RDS for MySQL instance in the database vSwitch must be accessible only to the web servers on port 3306.
Which combination of actions should the Cloud Architect take to meet these requirements? (Correct answers:
2)

A. Create a network ACL for the public vSwitch. Add a rule to deny outbound traffic to 0.0.0.0/0 on port
3306.
B. Create a security group for the web servers in the public vSwitch. Add a rule to allow traffic from
0.0.0.0/0 on port 443.
C. Create a security group for the RDS instance. Add a rule to deny all traffic except traffic from the web servers ' security group on port 3306.
D. Create a security group for the RDS instance. Add a rule to allow traffic from the public vSwitch CIDR block on port 3306.
E. Create a security group for the RDS instance. Add a rule to allow traffic from the web servers ' security group on port 3306.

Question #5
A company is designing an application. The application uses a Function Compute function to receive information through API Gateway and to store the information in an ApsaraDB RDS for PostgreSQL database.
During the proof-of-concept stage, the company noticed that the volume and velocity of data is very high, and they had to increase the Function Compute quotas significantly. Even with the increased quotas, they would sometimes lose data. The company has hired Javert, a Cloud Architect, to recommend a new design to improve scalability and minimize the configuration effort.
Which of the following solutions will meet these requirements?

A. Set up two Function Compute functions. Configure one function to receive the information. Configure the other function to load the information into the database. Integrate the Function Compute functions by using a Simple Message Queue publish model.
B. Switch from ApsaraDB RDS to Alibaba Cloud Tablestore, using hot data caching with Tablestore SDK to handle access.
C. Set up two Function Compute functions. Configure one function to receive the information. Configure the other function to load the information into the database. Integrate the Function Compute functions by using ApsaraMQ for Kafka.
D. Refactor the Function Compute function code to Apache Tomcat code that runs on Elastic Compute Service (ECS) instances. Connect the database by using native Java Database Connectivity (JDBC) drivers.

Solutions: