Alibaba ACA-Cloud1 Exam Dumps

Server Guard is a cloud-based security service that provides real-time protection for servers against intrusion events, such as brute force password cracking. Server Guard consists of a lightweight agent that is installed on the server and a cloud protection center that analyzes and responds to security threats.Server Guard can help the administrator to reduce the possibility of brute force password cracking by providing the following features1:

Password cracking protection: Server Guard can detect and block password cracking attempts on servers, such as SSH brute force attacks on Linux servers and RDP brute force attacks on Windows servers. Server Guard can also alert the administrator of the attack source, time, and frequency, and provide suggestions for password strengthening.

Webshell detection and removal: Server Guard can scan and remove webshells that are maliciously implanted on servers by hackers. Webshells are scripts that allow hackers to remotely execute commands on servers, such as stealing data, uploading files, or launching attacks. Server Guard can identify and delete webshells based on signature matching, behavior analysis, and machine learning.

Anti-virus and anti-ransomware: Server Guard can detect and terminate various types of malware, such as ransomware, mining programs, backdoor programs, worms, and trojans. Server Guard can also prevent the encryption and deletion of files by ransomware, and restore the files to their original state.

Security baseline check: Server Guard can perform security baseline checks on servers to evaluate their security posture and compliance level. Server Guard can check more than 40 security items, such as system configuration, account management, network security, and log audit. Server Guard can also provide security hardening suggestions and one-click fixes for the detected issues.

Security situation awareness: Server Guard can provide a comprehensive and visualized view of the security situation of the servers, such as the number of attacks, the attack sources, the attack types, the attack trends, and the security score. Server Guard can also provide security reports and recommendations for improving the security level of the servers.Reference:Security Center

Load and Performance Testing Service (LPTS) is a service that helps users to test the performance and stability of their websites, applications, or servers under different load conditions. LPTS can simulate a large number of concurrent users and requests, and generate detailed reports on the response time, throughput, error rate, and other metrics of the target system. LPTS can help users to identify and resolve performance bottlenecks, optimize resource utilization, and ensure the reliability and availability of their online services.Reference:Load and Performance Testing Service - Alibaba Cloud Academy, Load and Performance Testing Service - Alibaba Cloud Documentation Center

You can create a custom image for ECS using data disk snapshots or system disk snapshots. A snapshot is a backup of the data on a disk at a specific point in time. You can use snapshots to create custom images, which are copies of the operating system and applications on a disk.You can use custom images to create ECS instances that have the same operating system, applications, and data as the original disk12.

You cannot create a custom image for ECS using CPU snapshots or memory snapshots. These are not valid terms in Alibaba Cloud.CPU and memory are not persistent storage devices, and they do not store the operating system and applications that are required for creating a custom image34.Reference:1: Create a custom image from a snapshot - Alibaba Cloud12: What is a custom image?- Alibaba Cloud23: What is a CPU?- Alibaba Cloud34: What is memory?- Alibaba Cloud4

When using Alibaba Cloud OSS, you can set access control in three different levels, which are bucket level, object level, and RAM account level. Bucket level access control is the highest level of access control, which determines whether a user can access the bucket and its objects. Bucket level access control can be set to public read/write, public read, or private. Object level access control is the second level of access control, which determines whether a user can access a specific object in the bucket. Object level access control can be set to inherit from the bucket, public read/write, public read, or private. RAM account level access control is the lowest level of access control, which determines whether a user can perform certain operations on the bucket or the object. RAM account level access control can be set by using RAM policies, which specify the actions, resources, and conditions for the access.Reference:Object Storage Service (OSS) - Alibaba Cloud Academy,Access Control - Alibaba Cloud Documentation Center

Alibaba Cloud CDN can directly accelerate the access to the files stored in OSS and reduce OSS traffic costs. Alibaba Cloud CDN is a global network of points of presence (POPs) that are distributed across the globe. Alibaba Cloud CDN serves to reduce back-to-origin traffic. This in turn prevents network congestion and reduces latency.If you use Alibaba Cloud CDN to accelerate access to OSS, you can benefit from the following advantages1:

Improved user experience: Alibaba Cloud CDN caches the files stored in OSS to the POPs that are nearest to the users. This reduces the distance that the files need to travel and improves the access speed and user experience.

Reduced OSS traffic costs: Alibaba Cloud CDN reduces the number of requests that are sent to OSS. This reduces the OSS traffic costs and the load on the OSS servers.

Enhanced security: Alibaba Cloud CDN supports HTTPS secure acceleration and anti-leech protection. This ensures the security and integrity of the files stored in OSS.Reference:Use Alibaba Cloud CDN to accelerate access to OSS