ACA-CloudNative ACA Cloud Native Certification Exam Questions and Answers

No need to manage backend servers

No need to do OS upgrades or patching of the underlying system

Pay-As-You-Go

Pods run on ECS

Scaling out to 500 Pods takes about 30s

Scaling out to 500 Pods takes about 50s

Scaling out to 500 Pods takes about 90s

True

False

ACR is able to replicate images across regions

ACR provides vulnerability scanning for uploaded images

ACR can manage helm charts

ACR ' s standard version includes cross-region image replication

Kubernetes Cluster Federation

Auto Scaling to Serverless Kubernetes

Register External Kubernetes Cluster to be managed from Alibaba Cloud Container Service Console

Manage every clusters manually but to connect to the same image repository

Standard CPU type

GPU type

Preemptible Instance

Bare Metal Instance

True

False

True

False

Scaling out to 500 Pods takes about 30s

Scaling out to 500 Pods takes about 50s

Scaling out to 500 Pods takes about 90s

True

False

Tighly coupled monolith

Microservices

Client server

Agile

Emerging from trial and error

True

False

Alibaba Cloud provides 3 levels of security: Infrastructure, Software supply chain, and Runtime

Security

At the Infrastructure layer, Alibaba Cloud Container Service for Kubernetes (ACK) integrates

RAM to achieve authN (Authentication) and RBAC authZ (Authorization)

For Software Supply Chain, Alibaba Cloud provides Image Signing and Image Scanning to

make docker images are secure

Fur Runtime Security, ACK provides network policy based on Flannel and Terway networks

Security Center can defend application runtimes on ACK, and it also can detect attacks within

ACK.

ACK supports Sandboxed containers, which provide an independent kernel to enable enhanced security isolation

Log Service

ARMS

ARMS-Prometheus

Cloud Monitor

AuthN, AuthZ

Role-based Access Control

DevSecOps includes scanning container images, and signing container images in ACR Default

Instance Edition and Enterprise Edition

Data encryption of volumes

Log Service (Ingress)

SLB

CMS

Network

Deployment

DeamonSet

Sidecar

StatefulSet

1

2

3

4

True

False

True

False

True

False

Terraform can configure a Log Project and Log Store in Log Service when creating an ACK

cluster

Terraform can configure kube2ram policy when creating an ACK cluster

Terraform can configure a deployment.yaml file when creating an ACK cluster

Terraform can create a ARMS Helm Chart

True

False

Al

DeepLearning

Batching compute

HPC

High availability with multi-zone redundancy to minimize business disruptions

Easy to scale up or down (vertical or horizontal)

Set up infrastructure and provision resources in less than 1 day

No need for expert Database Administrators for setup & maintenance of database

Fully monitor your infrastructure in real-time

All resources that you used become free

True

False

True

False

True

False

ECS

EBM (bare-metal)

GPU Instance

Preemptible instance

Virtual Node

HPA

True

False

Flannel

Tcrway

VPN

GA

ECS

ECI

Prometheus Operator

K8S Deployment

K8S Service

KMS Secrets

True

False

If worker node capacity is more than 1000 cores, consider using EBM (ECS Bare Metal).

You should choose higher instance specifications, because you can run more tasks on a single

worker node this way, improving utilization.

You should choose the lowest possible instance specification for your workers, to reduce costs.

Ensure redundant worker node capacity for each running pod.

Attach data disk to worker nodes, because Docker image, system logs, and temp data will

consume space. Without a data disk, systems can quickly run out of disk space.

Because need to load all used & unused modules of applications

Because need to load only all used modules of applications

Because need to load all unused modules of applications

Because need waiting approval from Project Manager

True

False

Easy to scale out

Easy to manage

Reduce cost of software development

Reduce for bandwidth used for software application

Use PL/SQL Statement from RDBMS

Database lock required (commit and rollback scenario)

Use store procedure/function from RDBMS

Use a Choreographer and Event Bus. In the failed scenario in a service, a Choreographer will use event bus to cancel all the communications among services related.

True

False

ACR EE allows you to perform security scans on all Linux-based images

You can receive vulnerability assessments and recommendations

With the cloud-native delivery chain, the system will automatically block the deployment of

high-risk images

With the cloud-native delivery chain, an attacker can deploy an unsigned image on the ACK

cluster E. By default, a newly created ACR EE is connected to all networks

True

False

Supports continuous training pipelines with composable workflow

Scales out to hundreds of nodes to support AI/ML model training

Supports heterogeneous resource management, including management of GPU, FPGA, and

RDMA-enabled resources

All resources are free