Alibaba Cloud ACA-CloudNative ACA Cloud Native Certification Exam Exam Practice Test

Cloud Disk

NAS

OSS

Local Disk

True

False

When creating an Alibaba Cloud Container Service for Kubernetes (ACK) cluster, an ingress

dashboard can be installed at creation time.

LogStore can be installed via app catalog.

The Logtail-ds component can be installed by using

All communications and business logic should use a middleware called ESB(enterprise service bus), so all service maintenance will be in one place.

External applications should use API Gateway

Communications from other applications should directly use Database PL/SQL, it will become efficient

Communication in microservices architecture should use Proxy and VPN, and it will be more secured

Use session from webservice for stateless Authentication R Use JSON Web Tokens(JWT) for stateless Authentication

ECS

ECI

Elasticsearch

Kibana

Grafana

Logstash

True

False

Microservice amount * Instance type (e.g. 2C/4G)

Microservice amount * Average instance amount * Instance type (e.g. 2C/4G)

Microservice amount * Average instance amount * Instance type (e.g. 2C/4G) *

Redundancy

Microservice amount * Average instance amount * Instance type (e.g. 2C/4G) *

Redundancy + Autoscale nodes instance type

This is the blank file which was shared for last exam

sls_ingress_qps

sls_ingress_latency_avg

sls_ingress_latency_99

sls_ingress_pv

True

False

Configure Kubernetes standard output in Import Data by Log Service console

Configure where to store logs in each pod

Image scanning

Intelligent building

Global distribution

Automatic trigger

Image runtime defense

True

False

Arena is a CLI tools for machine learning achieve Al task scheduling

Arena is a machine learning framework for Al

Arena developed by alibaba cloud and contribute to kubeflow

Arena developed by alibaba cloud and contribute to kubernetes

True

False

True

False

Hardening cluster control-plane security based on CIS Kubernetes Benchmark

Ensure system pods and controllers are configured using best practices

Ensure there is no critical CVE vulnerability in system pods‘ images

Check each cluster does not have known vulnerabilities in its images

Sandboxed pods are a Docker runtime container type, and can run any docker image

Sandboxed Pods provide an independent kernel to enable enhanced security isolation

Sandboxed Pods can be run on both ECS and ECS Bare Metal (EBM) instances

Sandboxed Pods can also support multiple running containers per Pod

Domain-Driven Design

Decompose by Business capability

Centralize all components(Authorization, Presentation, Business logic, Database layer) use single-tiered software application combined into a single program from a single platform

Divide and conquer

Decompose by Subdomain

ECS

ECI

True

False

True

False

able to scale applications independently, independent application development and deployment, can use diverse technologies for application

able to scale out per module or per service

support agile software development, when we deploy new feature to existing monolith app only duration around 5 second for new traffic

In the lack of being able to scale applications independently, inter-application dependencies that hinder independent application development and deployment, reliability issues due to the centralized nature and the constraints on using diverse technologies for application