ACP-Cloud1 Exam Questions Tutorials

RDS provides whitelist access policies. You can set permitted IP addresses and IP network segments to effectively prevent hackers from attacking the server by port scanning1. A whitelist is a list of IP addresses or CIDR blocks that are allowed to access an RDS instance. By default, the whitelist is empty, which means that no IP address can access the RDS instance. You can add IP addresses or CIDR blocks to the whitelist to allow access from specific sources. You can also modify or delete the whitelist as needed2. Whitelist access policies help improve the security of your RDS instance and protect your data from unauthorized access3. 

Alibaba Cloud OSS (Object Storage Service) is the ideal solution for storing large volumes of video data generated by a surveillance system. OSS provides scalable, secure, and cost-effective storage that can accommodate growing data needs without the space limitations of local ECS disks. Additionally, OSS enables easy access to historical data when required, making it well-suited for video storage in use cases like surveillance.

According to the Alibaba Cloud Academy, Auto Scaling supports three scaling modes: manual mode, scheduled task, and cloud monitor and event-triggered task. Manual mode requires manual intervention to adjust the number of ECS instances, which is not feasible and with minimum operation efforts. Scheduled task allows you to set the time and number of ECS instances to be added or removed in advance, which is suitable for predictable traffic changes. Cloud monitor and event-triggered task allows you to set the monitoring metrics and thresholds for scaling actions, which is suitable for dynamic traffic changes. Healthy check mode is not a scaling mode, but a feature of SLB to ensure the availability of ECS instances behind the load balancer. References: : ACP Cloud Computing Certification Preparation Course - Auto Scaling, : ACP Cloud Computing Certification Preparation Course - Server Load Balancer

The X-Forwarded-For field in HTTP header is used to identify the originating IP address of a client connecting to a web server through an HTTP proxy or a load balancer. When the “Obtain the Visitor’s Real IP Address” function is enabled in Alibaba Cloud SLB, the SLB instance adds the X-Forwarded-For field to the HTTP header of each request and forwards the request to the backend server. The backend server can then obtain the real IP address of the visitor from the X-Forwarded-For field1. The format of the X-Forwarded-For field is as follows:

X-Forwarded-For: client, proxy1, proxy2

where the value is a comma+space separated list of IP addresses, the left-most being the original client, and each successive proxy that passed the request adding the IP address where it received the request from. In this example, the request passed through proxy1, proxy2, and then the SLB instance (proxy3).2

References: Obtain client IP addresses - Server Load Balancer - Alibaba Cloud, X-Forwarded-For - MDN Web Docs