ACP-Cloud1 Exam Dumps : ACP Cloud Computing Certification

 Alibaba Cloud CDN can record the real IP address of a visitor in the HTTP header field X-Forwarded-For, which can be obtained by the origin server or the user-defined log of Apache and Nginx. Alibaba Cloud CDN also provides a one-click function to enable the recording of the visitor’s real IP address in the console, which can be viewed in the access log. References:

Obtain the real IP address of a client from the origin server - Dynamic Content Delivery Network - Alibaba Cloud Documentation Center1

Welcome to Alibaba Cloud and find out more detail about cdn real ip2

 According to the Alibaba Cloud SLB documentation1, SLB provides a health check feature that monitors the availability and performance of the backend servers. If a backend server fails the health check, SLB stops routing requests to it and redirects the traffic to other healthy servers. This way, SLB can improve the system’s availability by eliminating single points of failure (SPOFs). Therefore, option A is a correct statement about SLB.

According to the same documentation1, SLB instances are assigned with public IP addresses or private IP addresses based on the network type. If you delete an SLB instance and create a new one, a new IP address will be allocated to the new instance. You cannot specify or reserve an IP address for an SLB instance. Therefore, option B is also a correct statement about SLB.

Option C is incorrect, because SLB does not require you to install or configure any SLB agent on the backend servers. You only need to add the backend servers to the SLB instance and configure the listener and the server group. SLB will automatically distribute the traffic to the backend servers based on the load balancing algorithm and the health check status2.

Option D is also incorrect, because SLB does not provide a function to automatically synchronize data among backend servers. SLB only handles the network traffic distribution and does not interfere with the data on the backend servers. You need to use other methods or tools to synchronize data among backend servers, such as rsync, lsyncd, or Alibaba Cloud Data Transmission Service (DTS)3.

References: Server Load Balancer:SLB overview, Add backend servers, and Data Transmission Service.

Before data communication is set up, the security groups match the security group rules one by one to query whether to allow access requests. If the protocol type, port range, authorization type, and authorization object of two security group rules are the same, the following rules apply:

If the two rules have the same priority, the rule of the denial policy takes effect first, and the rule of the allowed policy does not take effect. This is because the security group rules follow the principle of minimum permission, which means that the most restrictive rule is applied when there is a conflict.

If the two rules have different priorities, the rule with a smaller priority number takes effect. This is because the security group rules follow the principle of priority, which means that the rule with a higher priority (lower number) is applied when there is a conflict. References: ECS Security Groups - Alibaba Fundamentals - Cloud Academy, Security group rules - Elastic Compute Service - Alibaba Cloud Documentation Center