Alibaba ACP-Cloud1 Exam - Topic 3 Question 23 Discussion

Actual exam question for Alibaba's ACP-Cloud1 exam

Question #: 23
Topic #: 3

A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that

1. Must support secured remote O&M because the administrator often takes business trips.

2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)

AEnable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M.

BBuild an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems.

CUse the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.

DCreate multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.

Show Suggested Answer

Suggested Answer: A, B, D

by Sheron at May 27, 2022, 11:11 AM

Limited Time Offer

25%

Off

Get Premium ACP-Cloud1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Francoise

4 months ago

Sounds like a solid plan overall, but I’m not sure about D.

upvoted 0 times

...

Royce

4 months ago

Wait, why would you want to put all subsystems in the same security group?

upvoted 0 times

...

Dyan

4 months ago

D seems risky, sharing security groups could lead to issues.

upvoted 0 times

...

Aracelis

4 months ago

I think C is essential too for isolating subsystems.

upvoted 0 times

...

Armanda

4 months ago

A and B are definitely needed for secure remote access.

upvoted 0 times

...

Yoko

5 months ago

I’m not convinced about option D. It mentions putting everything in the same security group, which sounds risky for isolation.

upvoted 0 times

...

Dudley

5 months ago

I think we practiced a similar question where VPNs were crucial for secure communication. So, option A seems like a good choice for remote O&M.

upvoted 0 times

...

Marisha

5 months ago

I remember we discussed the importance of using a bastion host for secure remote access. I think option B makes sense for that.

upvoted 0 times

...

Samira

5 months ago

I'm a bit unsure about the security groups. I feel like option C could help with isolating the subsystems, but I can't recall if it’s enough on its own.

upvoted 0 times

...

Karan

5 months ago

Okay, let me think this through step-by-step. The question is asking about a function on the SMC2.0 homepage, and the options are different types of monitoring. I'll need to consider which monitoring function is most likely to be featured on the homepage.

upvoted 0 times

...

Cherelle

5 months ago

I feel like I've seen a similar question about preshared keys before. Maybe that's what's causing the issue in this case?

upvoted 0 times

...