Alibaba ACP-Cloud1 Exam - Topic 3 Question 23 Discussion

Question

A large enterprise wants to migrate the entire business system to Alibaba Cloud to save the overall IT procurement and O&M costs From the security aspect, the company requires that

1. Must support secured remote O&M because the administrator often takes business trips.

2. Networks between subsystems should be isolated because subsystems are independently used by different departments Which of the followings should be used together to meet the company's requirements? (Number of correct answers: 3)

Sheron · Accepted Answer

A) Enable the VPN on the bastion host (or directly use the VPN image on Alibaba Cloud Marketplace). The administrator uses VPN encrypted communication during O&M. and B) Build an independent ECS instance as the bastion host or remote logon and O&M, and authorize the bastion host to access ECS instances running other subsystems. and D) Create multiple ECS instances in the VPC to install subsystems of different departments- Allocate only Intranet IP addresses to all ECS instances, and deploy them in the same security groups.

Sheron · Answer

C) Use the security group function of the ECS instance, and respectively deploy ECS instances running different subsystems to independent security groups.