CEA-C01 Practice Questions

Alibaba Cloud ActionTrail continuously monitors, records, and retrieves user activities, API calls, and resource state changes across an account. It generates comprehensive event logs that enable operational auditing, compliance verification, security analysis, and resource tracking across Alibaba Cloud infrastructure.

Option A: CloudMonitor collects performance metrics and service operational status for alerts, but it does not record user administrative API audit logs.

Option C: Object Storage Service (OSS) provides scalable object storage capabilities and can store logs, but does not independently capture account operational audit events.

Option D: Elastic Compute Service (ECS) provides virtual compute instances and host infrastructure, not centralized user access and API operational audit logging capabilities.

1. Alibaba Cloud Documentation, ActionTrail User Guide, "What is ActionTrail?", Document ID: 28818, Section: Overview.

2. Alibaba Cloud Documentation, CloudMonitor User Guide, "CloudMonitor Overview", Document ID: 28600, Section: Introduction.

ApsaraDB RDS (Relational Database Service) is Alibaba Cloud's fully managed relational database service. It supports popular relational database engines including MySQL, PostgreSQL, Microsoft SQL Server, and MariaDB, handling administrative tasks such as patching, backups, scaling, and high availability.

A. ECS (Elastic Compute Service) provides virtual infrastructure/servers, not a managed relational database service.

B. OSS (Object Storage Service) provides unstructured object storage rather than relational database capabilities.

D. SLB (Server Load Balancer) distributes network traffic across backend instances for application availability.

- Alibaba Cloud Official Documentation, ApsaraDB RDS - Product Overview, Section: "What is ApsaraDB RDS?".

- Alibaba Cloud Relational Database Service User Guide, Section: "Supported Database Engines".

Alibaba Cloud Key Management Service (KMS) is a secure service designed for managing cryptographic keys and sensitive credentials. KMS enables users to generate, import, rotate, and control encryption keys used to secure data at rest across various cloud services and applications.

A. RAM (Resource Access Management) is an identity management service used to control access privileges to Alibaba Cloud resources, not to manage cryptographic keys.

C. OSS (Object Storage Service) stores unstructured data objects and integrates with KMS for server-side encryption, but does not provide key management functionality itself.

D. SLB (Server Load Balancer) distributes network traffic across backend ECS instances to ensure high availability, lacking features for secure key management.

- Alibaba Cloud Documentation, "What is Key Management Service?", Section: Product Overview / Core Features, Doc ID: KMS-Overview-001. https://www.alibabacloud.com/help/en/key-management-service/latest/what-is-kms

Alibaba Cloud Application Load Balancer (ALB) operates at Layer 7 (Application Layer) of the OSI model. It is specifically optimized for high-performance application-level load balancing, supporting protocols such as HTTP, HTTPS, and QUIC. ALB offers advanced content-based routing rules based on URLs, HTTP headers, hostnames, and query strings to distribute application traffic effectively.

B: Network Load Balancer (NLB) operates at Layer 4 (Transport Layer), processing high-throughput TCP, UDP, and TLS connections rather than handling application-layer protocols or HTTP routing rules.

C: Classic Load Balancer (CLB) is a legacy load balancer supporting basic Layer 4 and Layer 7 features, whereas ALB is Alibaba Cloud's dedicated, modern Layer 7 load balancer.

D: Object Storage Service (OSS) is an encrypted, scalable cloud object storage service for unstructured data, not a load balancing service.

- Alibaba Cloud ALB Documentation: "What is Application Load Balancer?" (https://www.alibabacloud.com/help/en/slb/application-load-balancer/product-overview/what-is-alb)

- Alibaba Cloud Server Load Balancer Overview: "Layer 7 Load Balancing Capabilities" (https://www.alibabacloud.com/help/en/slb/user-guide/slb-overview)

Alibaba Cloud Server Load Balancer (SLB) distributes incoming application traffic across multiple backend Elastic Compute Service (ECS) instances. SLB supports Layer 4 (TCP/UDP) and Layer 7 (HTTP/HTTPS) load balancing protocols, allowing SSL offloading, certificate management, and secure HTTPS traffic distribution to maintain high availability and fault tolerance for web applications.

Option B: Object Storage Service (OSS) is an encrypted object storage service for unstructured data, not a load balancing service.

Option C: ApsaraDB for RDS is a managed relational database service and does not manage or balance incoming HTTPS web traffic.

Option D: Elastic Compute Service (ECS) provides virtual compute nodes that host applications, but does not natively distribute external network load across multiple instances.

- Alibaba Cloud Documentation, "Server Load Balancer (SLB) Product Overview", Section: Features - Layer 7 Load Balancing (HTTPS support), Doc ID: slboverview01.

- Alibaba Cloud Documentation, "ALB/CLB HTTPS Listener Configuration Guide", Section: SSL Certificate Management and Offloading.

ApsaraDB for RDS Backup (RDS Backup) is the dedicated database backup and restoration feature in Alibaba Cloud. It provides automated and manual snapshot backups, binary log backups, and point-in-time recovery (PITR) mechanisms to ensure high availability, data durability, and disaster recovery for relational database instances.

A: Object Storage Service (OSS) stores unstructured files; while backup files can be exported to OSS, it is not the dedicated service managing database backups.

C: Elastic Compute Service (ECS) provides virtual server instances, not specialized database backup and log archiving management capabilities.

D: Content Delivery Network (CDN) caches and accelerates content distribution to end users globally and cannot perform database backup operations.

- Alibaba Cloud ApsaraDB for RDS Documentation: "Backup and Recovery Overview" (https://www.alibabacloud.com/help/en/rds/apsaradb-for-rds-mysql/user-guide/back-up-an-apsaradb-rds-for-mysql-instance)

- Alibaba Cloud Database Backup Service Documentation: "RDS Backup Management" (https://www.alibabacloud.com/help/en/rds/developer-reference/backup-and-recovery-overview)

Alibaba Cloud Network Attached Storage (NAS) is a shared file storage service supporting standard Network File System (NFS) and Server Message Block (SMB) protocols. It allows multiple Elastic Compute Service (ECS) instances, container pods, or HPC nodes to concurrently access a single shared file system for file sharing and centralized data management.

Option A: Object Storage Service (OSS) is a RESTful API-based object store, not a traditional file-sharing service using NFS or SMB protocols.

Option C: Elastic Compute Service (ECS) provides individual virtual machine compute units with local block storage, not a native distributed file-sharing service.

Option D: Content Delivery Network (CDN) caches web content at edge nodes for fast delivery, not for interactive shared file system access.

- Alibaba Cloud Documentation, "Network Attached Storage (NAS) Product Overview", Section: Shared File Storage Protocols (NFS/SMB), Doc ID: nasoverview01.

- Alibaba Cloud Documentation, "NAS Storage Class and Multi-ECS Mounting Guide", Section: Shared File Systems.

Alibaba Cloud Content Delivery Network (CDN) caches static and dynamic content onto edge nodes distributed globally. When a user requests content, the request is directed to the optimal edge node closest to the user, significantly reducing network latency, preventing origin server congestion, and ensuring high availability and accelerated content delivery.

A: Alibaba Cloud CDN decreases latency by serving content closer to end users, rather than increasing it.

B: CDN offloads bandwidth and reduces origin server load, optimizing operational costs rather than increasing storage costs.

C: CDN expands geographic reach globally through a vast distributed network of edge locations.

- Alibaba Cloud CDN Product Documentation, "What is Alibaba Cloud CDN?", Section: Benefits and Scenarios. https://www.alibabacloud.com/help/en/cdn/product-overview/what-is-cdn

Cloud Enterprise Network (CEN) provides enterprise-grade, high-speed, and low-latency network interconnectivity. It enables seamless cross-region inter-VPC communication as well as connection between Virtual Private Clouds (VPCs) and on-premises data centers over Alibaba Cloud's global private network backbones.

A. VSwitch is a subnet-level virtual network switch used to connect cloud instances within a specific Availability Zone inside a single VPC.

C. RAM (Resource Access Management) is an identity management service for user authentication and authorization control, not networking.

D. OSS is a storage service designed for storing unstructured objects and files, offering no networking or routing functionality.

- Alibaba Cloud Documentation: "What is Cloud Enterprise Network?", CEN Product Overview, Doc ID: docdetail/64614.html

- Alibaba Cloud Networking Architecture: "Cross-Region Enterprise Networking with CEN", Solution Blueprint, 2023.

Alibaba Cloud VPN Gateway establishes secure, encrypted communication tunnels (IPsec-VPN and SSL-VPN) between an enterprise's on-premises data center or local network and Alibaba Cloud Virtual Private Clouds (VPC). It enables cost-effective, reliable, and secure hybrid cloud connectivity without requiring physical leased line infrastructure.

Option B: Object Storage Service (OSS) provides object storage accessible over public or private network endpoints, not network connectivity infrastructure.

Option C: Elastic Compute Service (ECS) provides cloud computing instances within a network, but does not establish hybrid network connection links.

Option D: Resource Access Management (RAM) manages identity and access control permissions, not network connectivity between hybrid environments.

- Alibaba Cloud Documentation, "VPN Gateway Product Overview", Section: Hybrid Cloud Networking and IPsec-VPN Connectivity, Doc ID: vpngwoverview01.

- Alibaba Cloud Documentation, "Hybrid Cloud Architecture Whitepaper", Section 3: Establishing Secure VPC Connectivity via VPN Gateway.