Alibaba Cloud ACP-Cloud1 Practice Exams
Last updated on Oct 22,2026- Exam Code: ACP-Cloud1
- Exam Name: ACP Cloud Computing Certification
- Certification Provider: Alibaba Cloud
- Latest update: Oct 22,2026
Which of the following ports does RDs for MySQL listen on by default? (Single answer)
- A . Port 8080
- B . Port 3060
- C . Port 3600
- D . Port 3306
Before data communication is setup, the security groups match the security group rules one by one to query whether to allow access requests Assume that the user has created two security group rules 1 and 2 The protocol type, port range, authorization type, and authorization object of the two
security group rules are the same. The difference is that Rule 1 is a denial policy, rule 2 is an allowed policy, so the following statement is correct_______ (Number of correct answers 2)
- A . If rule 1 and rule 2 have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect
- B . If rule 1 and rule 2 have the same priority, the rule of the allowed policy takes effect first, and the rule that of the denial policy does not take effect.
- C . If rule 1 and rule 2 have different priorities, the rule with a small priority number takes effect
- D . If rule 1 and rule 2 have different priorities, the rule with a large priority number takes effect.
AC
Explanation:
Before data communication is set up, the security groups match the security group rules one by one to query whether to allow access requests. If the protocol type, port range, authorization type, and authorization object of two security group rules are the same, the following rules apply:
If the two rules have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect. This is because the security group rules follow the principle of minimum permission, which means that the most restrictive rule is applied when there is a conflict.
If the two rules have different priorities, the rule with a smaller priority number takes effect. This is because the security group rules follow the principle of priority, which means that the rule with a higher priority (lower number) is applied when there is a conflict.
Reference: ECS Security Groups – Alibaba Fundamentals – Cloud Academy, Security group rules – Elastic Compute Service – Alibaba Cloud Documentation Center
Alibaba Cloud Content Delivery Network (CDN) performs content acceleration with the support of intelligent DNS resolution The following function_________is NOT included in intelligent DNS resolution.
- A . A user request is directed to the server nearest to the customer based on location information of the pre-configured IP section.
- B . The intelligent DNS resolution can parse the same domain name into different IP addresses based on the IP of different visitors.
- C . The intelligent DNS resolution supports web page content caching. A user will receive data from the origin site at first-time access, and then will be reading data from cache in subsequent requests
- D . If a user activates mirror sites in different IDCs, intelligent DNS resolution can achieve load balancing by guiding customers in different places to different mirror sites.
C
Explanation:
Intelligent DNS resolution is a feature of Alibaba Cloud DNS that allows users to configure different IP addresses for the same domain name based on the geographic locations or ISPs of the visitors. This way, visitors can access the nearest or optimal server for better performance and availability. Intelligent DNS resolution does not support web page content caching, which is a function of Alibaba Cloud CDN. Alibaba Cloud CDN is a distributed network that delivers content from the origin server to the edge nodes closest to the end users, reducing the network latency and bandwidth consumption. Alibaba Cloud CDN caches the static content of the web pages, such as images, CSS, and JavaScript files, on the edge nodes, so that the users can access them faster and reduce the load on the origin server. A user will receive data from the cache in the first-time access, and then will be updated from the origin site in subsequent requests based on the cache expiration time.
Reference: 1: Intelligent DNS resolution – Alibaba Cloud DNS – Alibaba Cloud Documentation Center
4: Alibaba Cloud Content Delivery Network (CDN) performs content acceleration with the support of intelligent DNS resolution The following function_________is NOT included in intelligent DNS resolution.
5: Alibaba Cloud DNS:Alibaba Cloud line for intelligent DNS resolution (September 16, 2020) – Alibaba Cloud Documentation Center
If you want to build a secure and isolated network environment on Alibaba Cloud; meanwhile, design your network topology and specify Intranet IP addresses or CIDR Blocks in this network environment as needed, you can choose
- A . Leased line
- B . Virtual Private Cloud (VPC)
- C . Auto Scaling
- D . Express Connect
B
Explanation:
According to the Alibaba Cloud VPC documentation1, a virtual private cloud (VPC) is a virtual network dedicated to your Alibaba Cloud account. You have full control over your VPC, such as specifying the CIDR block, configuring route tables and gateways, and creating subnets. A VPC is an isolated network environment that provides security and flexibility for your cloud computing resources. You can use a VPC to build a secure and isolated network environment on Alibaba Cloud, design your network topology, and specify intranet IP addresses or CIDR blocks in this network environment as needed. Therefore, option B is the correct choice for your scenario.
Reference: What is a VPC? and Alibaba Cloud Virtual Private Cloud.
RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning.
- A . True
- B . False
A
Explanation:
RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning 1. A whitelist is a list of IP addresses or CIDR blocks that are allowed to access an RDS instance. By default, the whitelist is empty, which means that no IP address can access the RDS instance. You can add IP addresses or CIDR blocks to the whitelist to allow access from specific sources. You can also modify or delete the whitelist as needed2. Whitelist access policies help improve the security of your RDS instance and protect your data from unauthorized access3.
When a customer uses Alibaba Cloud Object Storage Service (OSS) service and finds there exist an amount of Internet downstream traffic, he/she can use Alibaba Cloud Content Delivery Network (CDN) service to reduce the traffic cost.
Because the Internet traffic cost of CDN is lower than that of OSS, moreover, the back-to-source traffic cost from CDN to OSS is also lower than a user access to OSS directly.
- A . True
- B . False
A
Explanation:
Alibaba Cloud Content Delivery Network (CDN) is a distributed network that delivers content to users based on their geographic locations. CDN can reduce the latency and improve the user experience of accessing content from the Internet. CDN can also reduce the Internet downstream traffic of OSS by caching the content in the edge nodes of CDN. The Internet traffic cost of CDN is lower than that of OSS, and the back-to-source traffic cost from CDN to OSS is also lower than a user access to OSS directly. Therefore, using CDN can reduce the traffic cost of OSS.
Reference: Object Storage Service (OSS) – Alibaba Cloud, Storage Services Overview:OSS – Alibaba Cloud, Introduction to Object Storage Service – Alibaba Cloud, Object Storage Service(OSS): Store Data Safely In The Cloud
Which of the following statements about OSS bucket is NOT correct? (Single answer)
- A . Every user can create more than one bucket
- B . Bucket name can be changed after creation
- C . Every bucket should have a unique name
- D . There is no limitation on the number of objects inside a bucket
Which of the following Alibaba Cloud products can provide Anti-DDoS service? (Number of correct answers: 2)
- A . Security Center
- B . Anti-DDoS Origin Service
- C . Anti-DDoS Pro Service
- D . Cloud Firewall
When using Alibaba Cloud SLB to forward layer 7 (HTTP) service requests, SLB will replace the IP address in the HTTP header file to forward requests. Therefore, the access IP address that can be seen on the backend ECS instance is the IP address of SLB instead of the client’s real IP address.
- A . TRUE
- B . FALSE
B
Explanation:
When forwarding layer 7 (HTTP) requests, Alibaba Cloud SLB preserves the client’s real IP address by including it in the X-Forwarded-For header. This allows the backend ECS instance to access the client’s actual IP rather than the SLB’s IP address. This practice is common for maintaining accurate client IP information in HTTP forwarding scenarios.
Reference: Alibaba Cloud SLB X-Forwarded-For Header
When using the Open API in ECS, you have to send out HTTP GET requests and append corresponding request parameters according to the API description.
- A . TRUE
- B . FALSE
B
Explanation:
Alibaba Cloud ECS Open API supports both HTTP GET and POST requests. While GET requests are common, POST requests are often used for secure data transfer and handling complex request parameters. Therefore, you are not limited to using only GET requests when interacting with the ECS API.
Reference: Alibaba Cloud ECS API Documentation