ACP-Cloud1 Exam Dumps : ACP Cloud Computing Certification

Alibaba Cloud provides comprehensive security protection covering networks, hosts, applications, databases, and content for on-cloud clients, but users still need to pay attention to security protection issues. Alibaba Cloud and its customers are jointly responsible for the security of customers’ applications built on Alibaba Cloud. With security responsibilities shared between Alibaba Cloud and its customers, Alibaba Cloud provides a secure infrastructure to decrease the enterprise security burden of customers. As such, customers can configure and use cloud products in a secure manner, thus relieving much of the underlying security burdens while allowing customers to focus more on their core business needs. However, customers still need to follow the best practices and guidelines for cloud security, such as using strong passwords, enabling multi-factor authentication, encrypting sensitive data, applying security patches, etc. Customers also need to monitor and manage the security risks and incidents of their cloud environment using Alibaba Cloud’s security products and services, such as Security Center, ActionTrail, Cloud Firewall, etc. References: Cloud Security- Alibaba Cloud, Security & Compliance Center, Shared Responsibility

According to the Alibaba Cloud Academy, Auto Scaling supports three scaling modes: manual mode, scheduled task, and cloud monitor and event-triggered task. Manual mode requires manual intervention to adjust the number of ECS instances, which is not feasible and with minimum operation efforts. Scheduled task allows you to set the time and number of ECS instances to be added or removed in advance, which is suitable for predictable traffic changes. Cloud monitor and event-triggered task allows you to set the monitoring metrics and thresholds for scaling actions, which is suitable for dynamic traffic changes. Healthy check mode is not a scaling mode, but a feature of SLB to ensure the availability of ECS instances behind the load balancer. References: : ACP Cloud Computing Certification Preparation Course - Auto Scaling, : ACP Cloud Computing Certification Preparation Course - Server Load Balancer

The X-Forwarded-For field in HTTP header is used to identify the originating IP address of a client connecting to a web server through an HTTP proxy or a load balancer. When the “Obtain the Visitor’s Real IP Address” function is enabled in Alibaba Cloud SLB, the SLB instance adds the X-Forwarded-For field to the HTTP header of each request and forwards the request to the backend server. The backend server can then obtain the real IP address of the visitor from the X-Forwarded-For field1. The format of the X-Forwarded-For field is as follows:

X-Forwarded-For: client, proxy1, proxy2

where the value is a comma+space separated list of IP addresses, the left-most being the original client, and each successive proxy that passed the request adding the IP address where it received the request from. In this example, the request passed through proxy1, proxy2, and then the SLB instance (proxy3).2

References: Obtain client IP addresses - Server Load Balancer - Alibaba Cloud, X-Forwarded-For - MDN Web Docs