A telecommunications company is expanding its backend architecture on Alibaba Cloud to add new services but needs to consolidate security management. They use multiple VPCs and want to streamline authorization management across their services.
What strategy should they adopt to simplify security group management across VPCs?

• A. Use basic security groups to create rules referencing other security groups, simplifying traffic control.
• B. Develop a centralized logging system for monitoring all security group activities.
• C. Leverage advanced security groups to contain higher IP counts across VPCs.
• D. Deploy network ACLs to manage traffic at the vSwitch level instead.

Sam runs a gaming startup, and is launching a real-time, massively multiplayer game on Alibaba Cloud.
Based on presales numbers, the startup predicts that there will be millions of concurrent users at launch. To ensure the experience of the gamers, their architecture must be able to deliver sub-50ms latency, scale automatically in response to sudden player surges, and provide efficient session management for millions of concurrent users.
What Alibaba Cloud services can Sam leverage to meet the requirements for the playerbase? (Correct answers: 3)

• A. Use Alibaba Cloud CDN for static assets like game textures.
• B. Store player data in ApsaraDB for MongoDB to handle unstructured data.
• C. Enable Auto Scaling groups for ECS instances based on CPU utilization.
• D. Deploy Tair (Redis OSS-Compatible) for low-latency session caching.
• E. Use Application Load Balancer (ALB) to distribute traffic to game servers.

An application runs on an ECS instance in a VPC. The application reads and processes logs that are stored in an OSS bucket in the SAME region. For security reasons, the ECS instance needs to access the OSS bucket without connectivity to the Internet.
Which of the following solutions can BEST provide private network connectivity to OSS?

• A. Directly access the OSS bucket from ECS via OSS ' s internal endpoint.
• B. Use VPN Gateway to establish an IPsec-VPN connection between the VPC and OSS.
• C. Create a gateway endpoint in VPC and use that endpoint to access OSS.
• D. Use PrivateLink to create a connection between the VPC and OSS.

Clash for Victory is a popular online game that is hosted on Alibaba Cloud. As latency can have a huge impact on gameplay, the developers for the game want to implement a mechanism to route all requests to the closest access point, monitor the health of the game, and redirect traffic to healthy backend servers.
The game is deployed in multiple regions on Elastic Compute Service (ECS) instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs).
As a Cloud Architect, what course of action would you take?

• A. Create an Alibaba Cloud CDN distribution and specify the ALB as the origin server. Configure the cache behavior to use origin cache headers. Use Function Compute to optimize the traffic.
• B. Create Alibaba Cloud CDN distribution and specify Object Storage Service (OSS) as the origin server.Configure the cache behavior to use origin cache headers.
• C. Configure a Global Accelerator instance. In each region, add a listener for the port that the game listens on, and attach it to the endpoint group of that region. Add the ALB instances as the endpoint.
• D. Configure an ApsaraDB RDS database to serve as the data store for the application. Create a Tair (Redis OSS-Compatible) cluster to act as the in-memory cache for hosting the application data.

Liam ' s company operates an on-premises data analytics platform across 12 servers. The system runs scheduled jobs (70% of the time, each job taking anywhere from 20 minutes to 2 hours to complete, with tight SLAs) and user jobs (30% of the time, each job taking less than 5 minutes, with no SLA requirements).
Scheduled jobs must continue to meet SLAs during system failures, while user jobs can be delayed.
As a Cloud Architect, you are tasked to migrate the system to Alibaba Cloud ECS using a consumption-based model while maintaining the same high availability and SLA requirements.
Which solution is the MOST cost-effective and flexible?

• A. Choose an Alibaba Cloud region and split the 12 instances across three zones. Use reserved instances to run 3 pay-as-you-go instances in each zone. Run 1 preemptible instance in each zone.
• B. Choose an Alibaba Cloud region and split the 12 instances across three zones. Use a savings plan to run
  3 pay-as-you-go instances in each zone. Run 1 preemptible instance in each zone.
• C. Choose an Alibaba Cloud region and split the 12 instances across three zones. Use reserved instances to run 6 pay-as-you-go instances in a single zone. Run 3 preemptible instances in each of the remaining two zones.
• D. Choose an Alibaba Cloud region and split the 12 instances across two zones. Use reserved instances to run 2 pay-as-you-go instances in each zone. Run 4 preemptible instances in each zone.