Huawei H13-821_V3.0-ENU Exam Dumps Opportunity To acquire Highest Result 2023

Jonnie Karnath2023-05-15T12:47:23+00:00

If you are preparing for the HCIP-Cloud Service Solutions Architect V3.0 exam, then you should consider using Huawei H13-821_V3.0-ENU exam dumps from Certspots. These questions are designed to help you acquire the highest possible result on the exam. Huawei H13-821_V3.0-ENU exam dumps from Certspots are updated regularly to ensure that they are aligned with the latest exam syllabus and exam pattern. This ensures that you are getting the most relevant and up-to-date information. By using these Huawei H13-821_V3.0-ENU exam dumps, you can increase your chances of passing the exam on your first attempt and acquiring the highest possible result.

Page 1 of 13

1. An Internet company uses Huawei Cloud to deploy its business, uses IPCO1 to deploy its development environment, and uses C2 to deploy its test environment.

Now that the development team wants to connect to the test group network and create a peer-to-peer connection service, which of the following needs to be confirmed before creating a peer-to-peer connection?

Whether the development group and the test group have the same ACL forwarding rules

Whether the development group and the test group are in the same region

Whether the development group and the test group are in the same security group

The development group and the test group must be on the same network segment

2. Which of the following types of elastic cloud servers is most recommended for scenarios that require memory, a large amount of data and data access, and require fast data exchange and processing?

Large memory type

A accelerated type

High-performance computing

General computing type

3. The document database service supports multiple instance types and can meet different business scenarios.

Which of the following instance types is not supported by the document database service?

Single node architecture

Active/standby architecture

Replica Set Architecture

Cluster Architecture

4. Froatheus is an open source system monitoring and alarm framework, which is very suitable for recording any purely mathematical time series. It is suitable for machine-centric monitoring, and also suitable for monitoring highly dynamic service-oriented architecture, because it does not support charts and Visual display, so it needs to be monitored with Grafana.

True

False

5. Comparing relational databases and non-relational databases, which of the following descriptions are correct? (Multiple choice)

Storage characteristics: Relational databases avoid data duplication by standardizing logical tables and obtain more compact space. Non-relational databases store data in data sets. Data may be repeated, but it is easier to read and write

Expansion capability, relational databases have strong expansion capabilities, while non-relational databases have weak expansion capabilities

Transactionality: Relational databases support transactionality very well, while non-relational databases do not support transactionality

Storage structure: relational databases use structured tables to store data, and non-relational databases use semi-structured datasets to store data

6. HDFS guarantees that a file can only be written by one caller at a time, but can be read by multiple callers at the same time.

True

False

7. HUAWEI CLOUD CDN site-wide acceleration combines dynamic and static acceleration. When users request resources, static content is obtained from the nearest edge node, and dynamic content is obtained by intelligently selecting a better route back to the source through dynamic acceleration technology.

True

False

8. Situation Awareness SA is a Huawei Cloud security management and situation analysis platform that can detect security risks on the cloud and present the global security attack situation for users.

Which of the following statements about the use of SA is correct? (Multiple choice)

Situational Awareness SA has the function of host protection and can present the security situation of hosts on the cloud without opening HSS

Situation Awareness Standard Edition and Professional Edition support viewing attack source information

Situational awareness combines big data mining and machine learning to analyze and present threat situations and provide protection suggestions

Situational awareness can provide log correlation analysis to meet the requirements of attack investigation, source tracing, compliance auditing, etc.

9. A customer purchased the auto scaling service. When the customer enabled the scaling policy for the created scaling group, he found that not only one scaling policy could be enabled for the scaling group, but also multiple scaling policies could be enabled. When enabling multiple scaling policies, it is necessary to ensure that the conditions of the multiple scaling policies do not conflict.

True

False

10. The ASI control plane and data plane of the Huawei Cloud application service grid are fully compatible with the open source sti0, and can seamlessly connect with Huawei Cloud's enterprise-level cloud container service CCE, providing customers with an out-of-the-box hands-on experience.

True b. wrong

Page 2 of 13

11. Compared with non-relational data, relational databases complete the matching of the following options from the perspective of storage and expansion. (drag)

图示

描述已自动生成

12. Which of the following descriptions about the applicable scenarios of the Huawei container high-performance batch computing solution are correct? (Multiple choice)

AI scenarios: multi-computing power is available out of the box, natively supporting a variety of mainstream training frameworks

Database scenarios, exclusive resource sharing, network isolation, and performance assurance

Big data scenarios: separation of storage and computing, second-level expansion and contraction of big data clusters, improved analysis performance, and reduced use costs

Gene sequencing scenario, supports 100,000+ container-scale concurrency, and easily handles the analysis and mining of massive sequencing data

13. Dedicated enterprise storage service DESS is a dedicated storage service based on Huawei's enterprise storage. It can provide performance and reliability consistent with enterprise private cloud environments, and simplify the difficulty for enterprise users to deploy key applications on public clouds.

True

False

14. When using the data replication service DRS to configure the migration task, it is necessary to check whether the data transfer server can connect to the cloud database to be migrated. This operation needs to be completed in the pre-check step

True

False

15. Users can deploy various services through the elastic cloud server ECS according to their needs, but it does not mean that they can use the cloud server to perform any operations. Which of the following descriptions about the use of elastic cloud servers is correct?

Build a crawler environment on the elastic cloud server to collect various data

Use the elastic cloud server to launch a network attack on the external system to test the stability of the system

Use elastic cloud servers to build services such as private servers or unaudited cross-border VPNs

To meet new business requirements, switch the operating system of the elastic server

16. Huawei Cloud MapReduce service MRS only supports unstructured data storage in clusters, but provides a variety of mainstream computing engines, such as Storm (stream computing), Spark (memory computing), MapReduce (batch processing), etc.

True

False

17. Enterprise Service Bus (ESB) can provide reliable message transmission, service access, protocol conversion, data format conversion, etc., and content-based routing and other functions, shielding the physical location, protocol and data format of services.

True

False

18. The bare metal server supports four network types, which are virtual private cloud, advanced network, custom VLAN network, and B network.

True

False

19. In the same region, when a failure occurs in one availability zone, the ECS in another availability zone will not be affected.

True

False

20. Database Exploration DLl is a one-stop big data platform of HUAWEI CLOUD, providing customers with high-performance big data components of the Hadoop ecosystem such as Hudi, ClickHouse, Spark, Flink, Kafka, HBases, etc., and supports the integration of databases, data warehouses, Bl, and Al and other capabilities.

True

False

Page 3 of 13

21. Application operation and maintenance management AOM service supports in-depth docking application services, one-stop collection of operation and maintenance data of infrastructure, middleware and application instances, which of the following descriptions about AOM features is wrong?

Apply auto-discovery. Automatically deploy the collector, which can actively discover and monitor the application according to the operating environment of the application

Flexible notification of alarms, providing multiple anomaly detection strategies and supporting rich abnormal alarm triggering methods and APIs

Application monitoring: regularly collect JVM, service calls, exceptions, external calls, database access and other middleware indicator data of Java applications through probes

Fast diagnosis of faults: quickly find abnormal fault points through distributed call tracing

22. Although microservices have obvious advantages, they also bring certain problems. For example, the number of developed services increases, remote calls are slower, and there is always a risk of failure. Therefore, except for special scenarios, it is generally not recommended to use microservice architecture.

True

False

23. Which of the following HUAWEI CLOUD security services can effectively protect game server hosts from mining and ransomware attacks?

Application Firewall WAF

Enterprise host security HSS

ACL firewall

Anti-DDoS Pro

24. Kubernetes, open a variety of container runtime interfaces to improve the scalability of the cluster, which of the following extension interfaces supported by Kubernetes is wrong?

CRI, Container Runtime Interface

CAl, Container Orchestration Interface

CNI, container network interface

CSl, Container Storage Interface

25. The live migration function of the data replication service supports multiple network migration methods. Which of the following are the network migration methods supported by the live migration function? (Multiple choice)

VPC network

VPC endpoint network

VPN network

Dedicated network

26. When customers analyze and obtain performance indicators based on stress tests, they usually set thresholds for basic resource performance monitoring data, among which the maximum threshold of CPU usage load is <85%, the maximum threshold of memory usage load is <85%, and I/ O read and write utilization rate maximum threshold <80%

True

False

27. An insurance company plans to migrate the business of the local data center to Huawei Cloud, and adopt the cross-AZ active-standby disaster recovery solution for business deployment. Virtual machine layer for disaster recovery planning

True

False

28. Cloud log service TS, which provides collection, storage, and query functions for various cloud resource operation records, including detailed information about tenants' operations on cloud service resources such as creation, modification, and deletion. The default storage time is 7 days. For events that require long-term storage, you can configure the object storage OBS dump for the tracker, and store the events synchronously and long-term in the OBS bucket.

True

False

29. Which of the following descriptions about the disaster recovery solution in two places and three centers is correct? (Multiple choice)

When the entire production site fails, switch the active and standby status of the database, and then modify the DNS authorization to 0% for the production site and 100% for the disaster recovery site

Configurations, logs, snapshots, and backups generated by production and disaster recovery centers are replicated across regions through VBS

The business can be shared between the two regions through DNS, and the disaster recovery center only shares the business when a disaster occurs

When an AZ of the production site fails, the business system switches to another AZ, and the database master and backup switch

Deploy RDS database instances in the production and disaster recovery centers respectively, and the databases are 1:1:1 master-slave replication

30. The cloud monitoring service CES can collect log data of hosts and cloud services. After collecting logs, the log data can be displayed in a simple and orderly manner on the cloud log console, and can be queried in a convenient and fast manner. Long-term storage, convenient for users to retrieve at any time.

True

False

Page 4 of 13

31. In order to understand the details of the scaling bandwidth policy, users can view the basic information and execution logs of the scaling bandwidth policy.

The policy execution log records the details of policy execution, which of the following information is included? (Multiple choice)

Scale primitive values

Scale target value

Policy Execution Time

Execution status of scaling bandwidth policies

32. No-relational databases have extremely high concurrent read and write performance. Because it uses () to store data.

33. Service Mesh is a specialized infrastructure layer that handles service communication. Its responsibility is to perform reliable request transmission under the complex topology of cloud-native applications. In practice, it is a set of lightweight network proxies deployed together with application services, transparent to application services.

True

False

34. In the Docker environment, Cgroupi is usually responsible for encapsulating kernel resources, so that each container has an independent resource, so that different processes will not interfere with each other when using the same resource in their respective spaces.

True

False

35. The web application firewall is a security service that guarantees web applications. Which of the following types of web attacks can be blocked for websites? (Multiple choice)

XSS cross-site attack

SQL Injection and Command Injection Attacks

Trojan attack on website

Text injection attack

36. A game company deploys its business on a cloud server equipped with the Linux system, and uses the cloud hard disk service to back up its log data. At present, the operation and maintenance personnel find that the utilization rate of the disk has reached 80%, and the cloud hard disk needs to be expanded. After the operation and maintenance personnel perform the capacity expansion operation, they find that the capacity of the cloud disk has not increased. Possible reason: The engineer only expanded the capacity of the litigation disk, but did not format the expanded part, resulting in the unusable hard disk space after expansion.

True

False

37. The instance removal strategies currently supported by the auto scaling service include four methods. They are: earlier created instance, later created instance, earlier created instance in earlier created configuration, and later created instance in earlier created configuration. The instance policy created earlier is useful when users want to test a new scaling configuration but do not want to keep it in production.

True

False

38. Which of the following descriptions about the comparison between elastic cloud servers, bare metal servers, and dedicated hosts is correct?

Both single-sex cloud servers and bare metal servers are virtual machines

A single cloud server is equivalent to a virtual machine, while a bare metal server is equivalent to a physical machine

Bare metal servers and dedicated hosts are both physical machines and provide virtualization platforms

Both bare metal servers and dedicated hosts are physical machines, but do not provide a virtualization platform

39. The cloud audit service CTS can be used in conjunction with the function workflow service FunctionGraph to jointly provide the key operation notification function, and the notification objects include natural persons and business interfaces. For example, customers can select a certain type of audit log as a trigger (such as file upload) in FunctionGraph to trigger a preset workflow (such as triggering a notification function) to simplify O&M or avoid problems and risks.

True

False

40. The HUAWEI CLOUD private line is used to build a high-speed dedicated connection channel between the user's local data center and the HUAWEI CLOUD VPC. Which of the following is not a network requirement for private line access?

Auto-negotiation must be disabled for the port, and the port speed and full-duplex mode must be manually configured

Users must use single-mode 1 GE or 10 GE optical modules to connect to Huawei Cloud access devices

It is recommended to use public IP addresses on and off the cloud, and the intercommunicating IP network segments cannot conflict

Must support 802.1Q VLAN encapsulation across the entire connection (including intermediate devices)

Page 5 of 13

41. A software development enterprise hopes to build a complete DevOps process from code submission to application deployment with the help of cloud container instance service CCI, so as to improve the efficiency of enterprise application generation selection.

Which of the following descriptions of this scene is wrong?

Users do not need to create and maintain clusters, and realize the whole process automation from CI/CD

The container is started on demand, and the payment is made according to the resource specification and convenient use time, so as to avoid idle resources

Delivered as a container image, it can be migrated from the development environment to the production environment indiscriminately

Support GPU/FPGA and other computing acceleration

42. A user wants to achieve cross-regional communication between VPCs. Which of the following services can help the user achieve the goal? (Multiple choice)

Peer-to-peer connection

Virtual Private Network

Cloud Dedicated Line

Cloud connection

43. Compared with the cloud firewall, the web application firewall mainly protects the Internet border and the VPC border, while the web application firewall mainly protects web services, domain names or P, etc.

True

False

44. Security is the basis of architecture design. Designing a secure architecture can minimize the risk of system intrusion and ensure business operation.

Which of the following is not a high-security architecture design purpose?

Manage IAM through a unified identity, distinguishing system roles and corresponding permissions

Use the elastic scaling service AS to adjust the number of instances according to the actual situation

Multi-dimensional monitoring of the system, real-time assessment of system risk

Use cloud certificate management CCM to manage certificates

45. A user wants to use a message middleware that is ready to use, highly available, and supports the AMQP protocol. Which of the following is recommended?

Kafka

RabbitMQ

Zookeeper

RocketMQ

46. A customer's business system is deployed on Huawei Cloud. Due to business needs, it is necessary to open up networks between different departments in the same area. It is planned to realize this requirement by configuring peer-to-peer connections. However, when adding a peer-to-peer connection route, if the peer-to-peer connection route overlaps with the destination address of the cloud private line or VPN route, the route may become invalid at this time.

True

False

47. IoT edge service is the application of edge computing in the Internet of Things industry. Which of the following statements about this service is wrong? (Multiple choice)

Before using the IoT edge service, you must first enable the device to access the IoTDA service

The control of the device by the IoT edge software supports sending commands in the cloud, which can directly send commands to the device

IoT edge software is deployed on the gateway and managed as an edge node

IoT Edge can also provide local autonomy of devices even when the edge node is disconnected from the cloud

48. Huawei Cloud Distributed Message Service RocketlQ version is fully compatible with the open source RabbitlQ, providing users with features such as out-of-the-box, rich message features, flexible routing, high availability, monitoring, and alarms.

True

False

49. The intranet connection method provided by GaussDB (for Redis) is applicable when the application is deployed on the elastic cloud server, and the elastic cloud server and the database instance are in the same region and in the same VPC.

The following describes how to connect to a GaussDB (for Redis) instance, which one is wrong?

Intranet IP

Intranet domain name

Reverse proxy address

Load balancing address

50. Recently, the website of a certain enterprise suffered from a malicious network attack. In order to protect the safe operation of the business, the enterprise decided to purchase cloud security products.

Which of the following descriptions about how to use cloud security products are correct? (Multiple choice)

Use situational awareness to link with other security products and services, and use AI big data analysis technology to conduct classified statistics and comprehensive analysis of threat alarms and attack sources, presenting the overall security attack situation

Use enterprise host security HSS to scan web vulnerabilities and operating system vulnerabilities, and list the overall security status of each website asset

Use the web application firewall WAF to detect and automatically list all software information installed in the current system, helping users quickly inventory software assets and identify unsafe software versions

Use the DDoS protection ADS service to provide external services through the high-defense IP proxy source site IP, and divert all public network traffic to the high-defense IP to prevent the source site from being attacked by large-traffic DDoS

Page 6 of 13

51. In order to prevent abnormal access by malicious users, an Internet company controls the data flow in and out of the subnet by configuring outbound/inbound rules associated with the company's subnet to protect the security of the company's subnet.

Regarding the priority description of network ACL rules, which one is correct?

The value of "priority" has nothing to do with the priority

The smaller the value of "Priority", the lower the priority

The smaller the value of "Priority", the higher the priority

The larger the value of "Priority", the higher the priority

52. The ROMA series products are solutions launched by HUAWEI CLOUD for enterprise application and data development. They can effectively connect enterprise systems and help enterprises realize complex business integration and innovation. Each ROMA product has a large number of quantum functions. Please compare each function with the available The ROMA product corresponds.

图示

描述已自动生成

53. The implementation of cloud-native applications is usually based on the micro-service architecture. Which of the following descriptions about the underlying technology of the micro-service architecture is correct? (Multiple choice)

Non-intrusive service governance can be achieved through Istio

Agile infrastructure can be realized through unified scheduling of OpenStack resources

Continuous development and integration can be achieved through the microservice framework Spring Cloud

Containerized deployment can be realized through Kubernetes container orchestration and scheduling

54. In the actual production environment, security management on the cloud is often performed by configuring security groups and network ACLs.

For security groups and network ACLs, which of the following descriptions about the differences between the two are correct? (Multiple choice)

Apply operation: security group must be selected and automatically applied to the cloud server, network ACL, when creating a subnet, there is no ACL option

Protection object: security group, the protection is at the cloud server level, network ACL, the protection is at the subnet level

Priority: security group, when rules conflict, take effect in the order of binding security groups, network ACL, when multiple rules conflict, the rule with lower priority takes effect

Packet group: security group, only supports triplets of packets, network ACL, supports quintuples of packets

55. A company uses the ECS service on Huawei Cloud. In order to ensure high availability of the service and achieve the effect of switching to other availability zones immediately after a certain availability zone fails, it is recommended for tenants to use it. Which of the following Huawei Cloud services?

Cloud backup service CBR

Storage Disaster Recovery Service SDRS

Cloud server backup CSBS

Cloud disk backup VBS

56. The cloud monitoring service CES provides users with a three-dimensional monitoring platform for resources such as cloud servers and bandwidth. Which of the following services can be monitored through CES? (Multiple choice)

Single cloud server ECS

Cloud Disk Service EVS

Object storage service OBS

Bare metal server BMS

57. Which of the following descriptions about situational awareness are correct? (Multiple choice)

Situational awareness generates security disposal strategies for detected security threats, and forms security linkage with security defense products

Situational awareness collects network traffic by deploying flow probes and intrusion detection systems at the entrance and exit of HUAWEI CLOUD, and at the same time collects logs from security devices such as DoS, web firewalls, and host security to the security threat analysis system

Provide log association analysis to meet the requirements of attack investigation, source tracing, and compliance auditing

Establish different threat models, and through big data learning and analysis, a variety of security threats can be identified

58. Relational databases generally store data in the form of tables, and non-relational databases generally store data in the form of keyvalues.

True

False

59. In the Kubernetes cluster, Ingress provides an externally accessible URL for the Service and routes access traffic to the backend Service.

Which of the following statements about Ingress is correct?

Because Ingress can expose ports or protocols, it is more convenient to access than Service and Ingress

If you need to use the Ingress function, you must first install the Ingress Controller on the Kubernetes cluster

You can set an external domain name in the Service, and then access the Ingress through the domain name, and then access the back-end service

Ingress is a containerized object that manages external access to services in the cluster. The typical access method is SSH

60. HUAWEI CLOUD Application Service Grid ASM is based on the open source Isti of HUAWEI CLOUD. The service grid platform launched is also an important part of the cloud-native C1oud Native ecosystem. Which of the following descriptions about ASM is correct? (Multiple choice)

Provide full application hosting, call chain monitoring, alarm notification and real-time log analysis capabilities

Strategic intelligent routing and elastic traffic management

Intelligently manage the authentication, authentication, and encryption of communication between services to provide security for service communication

Support grayscale release and continuous testing to help users upgrade calmly

Page 7 of 13

61. Management Detection and Response MDR combines Huawei's more than 30 years of security experience to establish a security risk management and control system for customers consisting of management, technology, and operation and maintenance in the form of cloud services.

True

False

62. In the two-site three-center disaster recovery solution on the cloud, business sharing can be realized through DNS between the two regions, and the disaster recovery center can handle some read-only and data analysis services

True

False

63. Which of the following products/services is not supported by Threat Detection Services?

Virtual private cloud service

Object storage service

Enterprise hosting security

Cloud analysis service

64. Blast-proof host login: When logging in to the host, bring your own private key for authentication and replace the password login method

Key pair management KPS, key management KMS, exclusive encryption DHSM

Dedicated encryption DHSM, key management KMS, key pair management KPS

Dedicated encrypted DHSM, key management KMS, key management KMS

Key management KMS, dedicated encryption DHSM, key pair management KPS

65. The cloud-native database MRS is one of the big data solutions provided by HUAWEI CLOUD for customers. Which of the following descriptions about IRS is wrong?

MRS can connect to Kafka in real time, analyze Storm in real time, mass store Hbase and other components, and complete the process of mass data information collection, analysis and processing

Hadoop's distributed file system HDFS can realize reliable centralized reading and writing of large-scale data, which is very suitable for random reading and writing of small files

MRS provides users with a unified management platform for enterprise-level big data clusters, helping users quickly grasp the health status of services and hosts

You can quickly migrate offline Hadoop big data platform data to the cloud through cloud data migration CDM and other products, and move customer business and data to the cloud big data service MRS at one time

66. Which of the following descriptions about storage disaster recovery service SDRS is correct? (Multiple choice)

Disaster recovery is mainly aimed at major natural disasters such as fire and earthquake, so a certain safety distance must be ensured between the production site and the disaster recovery site

Support GPU acceleration, FPGA acceleration, bare metal servers, and use storage disaster recovery services

The disaster recovery system not only protects data, but also ensures business continuity

The highest level of disaster recovery can achieve RPO=0, backup can set multiple automatic backup strategies at different time points, and restore data to different backup points

67. Which of the following descriptions about the features of the data exploration DLI are correct? (Multiple choice)

Multi-data source analysis: Data sources such as CloudTable, DVS, and RDS can be accessed through DLI

Elastic resource pool: The backend of the resource pool adopts the CCE cluster architecture, supports heterogeneity, and performs unified management and scheduling of resources

Separation of storage and calculation After the user stores the data in OBS, DLI can directly connect with OBS for data analysis

Support SQL query function: can provide users with standard SQL statements

68. The cloud-native database solution in the Huawei Cloud MapReduce service provides a leading architecture for separating storage and computing for unstructured data scenarios such as massive government images and videos. It uses cloud object storage OBS to replace MRS local storage as big data storage. Which description of the OBS service is wrong?

Use three copies to replace the EC search method to reduce the unit capacity cost

Provide standard storage, low-required access storage, and archive storage in three categories

Separate expansion on demand

Distributed architecture, scalable horizontally

69. An e-commerce website plans to carry out large-scale discount activities during the company's anniversary. In order not to affect the user experience during the peak period, the operation and maintenance director hopes to use the elastic scaling service to dynamically adjust the cloud server resources according to the number of user visits.

Which of the following is the correct configuration sequence for auto scaling services?

1. Create scaling configuration, 2. Create scaling group, 3. Add scaling policy, 4. Set scaling policy parameters

1. Create scaling configuration, 2. Set scaling policy parameters, 3. Create scaling group, 4. Add scaling policy

1. Create an auto scaling group, 2. Add a scaling policy, 3. Create a scaling configuration, 4. Set scaling policy parameters

1. Create an auto scaling group, 2. Create a scaling configuration, 3. Add a scaling policy, 4. Set scaling policy parameters

70. The disk mode of the cloud hard disk service EVS can be divided into SCSI type and () type according to whether it supports advanced SCSI commands.

Page 8 of 13

71. With the development of cloud technology, more and more enterprises choose to deploy their business on the cloud, and the operation and maintenance of assets and accounts on the cloud becomes more complicated. Now it is hoped to collect and monitor the system status, security events and network activities of each component in the network environment in real time, to protect the network and data from intrusion and damage from external or internal users, and to facilitate centralized alarming, timely processing and audit determination. The most recommended security service product is ()

72. Which of the following network types are mainly included in the cluster network of Huawei Cloud Container Engine CCE? (Multiple choice)

O&M network

Node network

Container networking

Service network

73. Which of the following descriptions about bare metal server BMS is wrong?

Bare metal servers and virtual machines have virtualization overhead, resulting in a certain loss of computing performance

Bare metal servers are dedicated computing resources for users, and support VPC and security group isolation

Bare metal servers are currently divided into two types according to the CPU architecture: x86 instances and Kunpeng instances

The billing mode of BMS is yearly and monthly, and does not support pay-as-you-go

74. Which of the following operations can improve the security of cloud server accounts? (Multiple choice)

Use the root user to remotely log in to the cloud server through SSH

Set a complex password for the cloud server

Turn on the two-factor authentication function of enterprise host security, and perform secondary authentication on cloud server login behavior

75. A user needs to collect logs from the elastic cloud server ECS through the cloud log service TS. Which of the following description of the LTS service is wrong?

You can set the log storage time by creating a log stream

CAgent needs to be installed for the ECS host

Log groups can be created in the log stream to facilitate further classification and management of logs

The log data beyond the storage time will be automatically deleted, and the log data that needs to be stored for a long time can be dumped to the object storage OBS

76. In the Kubernetes architecture, which of the following components can be used as a service to discover and store the state of the cluster and its configuration?

Kubelet

Kube-proxy

API Server

Eted

77. As a distributed large-scale resource scheduling system at the bottom of the cloud, Huawei Cloud Smart Cloud Brain includes the following core subsystems: data collection and docking subsystem, data storage and service subsystem, data analysis and modeling subsystem, and resource pool Operation Subsystem, Business Innovation Subsystem

True

False

78. Database and application migration UGO's source library portrait function is trained with the key indicators of the database as the characteristics, abstracting the whole picture of the database information.

Which of the following key indicators are the objects of extraction? (Multiple choice)

DB name and DB creation time

CPU and memory usage

Table and SQL Complexity

IOPS and QPS

79. When there are many container instances running in Kubernetes, in order to facilitate management, Kubernetes provides a Label (label) mechanism to classify resources. Which of the following descriptions about Label are correct? (Multiple choice)

The principle is to mark resources during resource allocation through Name space

Various resources can be marked by Label

The specific form of Label is a key-value tag pair

It can be set when creating resources, or added later

80. Mirror services are divided into public mirrors, private mirrors, shared mirrors and market mirrors.

What kind of image can a user create to share with other users?

Public Mirror

Private image

Shared image

Market mirroring

Page 9 of 13

81. Cloud container instance service CCI provides serverless container (serverless container) introduction, so that users can run containers directly without creating and managing server clusters. In the following description about cloud container instance service CCI, which one is wrong?

Can call or manage Kubermetes cluster resources

Provide rich network access methods and support four-layer and seven-layer load balancing

Supports multiple types of CPU computing resource calls, but does not support GPU computing for the time being

Cloud container instances provide dedicated container instances, such as running Kata containers

82. Service Mesh is a specialized infrastructure layer that handles service communication. In the following description of Service Mesh, which items are correct? (Multiple choice)

Belongs to the middle layer of inter-application communication

Common applications such as Istio, Spring Cloud, etc. all belong to the Service Mesh architecture

It is a set of lightweight network agents deployed together with application services, transparent to application services

It can support distributed systems such as load balancing, service discovery, monitoring and tracking, and flow control

83. In Huawei container hybrid cloud and multi-cloud solutions, which of the following services can provide traffic management capabilities for K8S clusters deployed in different regions?

Application Service Grid ASM

Load balancing service ELB

Container Delivery Pipeline ContainerOps

Multi-cloud container platform MCP

84. High availability on the cloud is one of the factors that need to be considered when designing the architecture. In the actual design process, multiple ECS instances are often run on the backend of the elastic load balancing EB to avoid () failures.

85. When planning and designing business security, ELB can be set to provide services to the public network to ensure business scalability while avoiding the direct opening of business nodes to the public network.

True

False

86. Huawei Cloud host migration service SMS has the characteristics of smooth migration, efficient transmission, good compatibility, and high security. Regarding the compatibility of SMS, which of the following hosts does SMS support to migrate to Huawei Cloud? (Multiple choice)

Cloud hosting on AWS

Virtual machines on local private cloud

Local VMware virtual machine

Local x86 physical machine

87. Which of the following descriptions about Region and AZ is correct?

There can only be one AZ in a Region

One is a collection of one or more physical data centers, with independent wind, fire, hydropower, and logically divide computing, network, storage and other resources into multiple clusters

Dedicated Region refers to the Region that provides general cloud services to public tenants

General Region refers to a dedicated Region that only undertakes the same type of business or only provides business services for specific tenants

88. The software development platform DevCloud is a one-stop cloud DevSecOps platform for developers. What functions/services does this platform mainly consist of? (Multiple choice)

project management

Code Hosting

Compile and build

Application operation and maintenance monitoring

89. Please match the following related components and functional characteristics of open source Kubernetes.

表格

描述已自动生成

90. Scalability is a design index for the computing and processing capabilities of software systems. Highly scalable systems can often increase the processing capabilities of the entire system through very few changes.

Which of the following scenarios demonstrate the horizontal scalability of the system? (Multiple choice)

Update a batch of ECS from the original 2vCPUs/4 GiB to 4 vCPUs/8 GiB

The system automatically distributes instances to adapt to the traffic load through automatic elastic scaling of AS

Deploy database instances through distributed database middleware DDN

Use the cloud container engine CCE to manage cloud containers

Page 10 of 13

91. Serverless computing provides a micro-architecture. End customers do not need to deploy, configure, or manage server services. All server services required for code operation are provided by the cloud platform.

True

False

92. The following is a list of several reasons for an Internet customer to use CDN services. Which of them is the most important reason?

Speed up website access

Achieve national coverage across operators and regions

Securing the Site

Reduce investment in operation and maintenance, and focus more on business

93. In the Huawei Cloud security protection framework, in addition to using security protection products to ensure the security and operation and maintenance security of the infrastructure in the architecture, which of the following factors need to be considered? (Multiple choice)

Process system security

Information Security Level Protection

Tenant Lifecycle Management

System expansion security

94. In the practical guidance of microservices, () microservices can be published in gray scale.

95. Fumctionbreph is an event-driven function hosting computing service in Huawei Cloud. Using unctimhraph does not require writing business function codes or setting running conditions. It only needs to configure and manage infrastructure such as servers, and function computing can run elastically and efficiently.

True

False

96. Which of the following descriptions about SOA architecture and microservice architecture are correct? (Multiple choice)

Application scenarios: SOA architecture is huge, complex, and heterogeneous enterprise-level systems, microservice architecture is fast, lightweight, and Web-based Internet systems

Communication method: SOA architecture mostly uses ESB as the role of communication between services, microservice architecture uses lightweight communication methods, such as HTTP RESTful

Deployment method: SOA architecture services mostly adopt distributed development + independent deployment, microservice architecture mostly adopts bus-style development + overall deployment

Service delivery: SOA architecture delivery is relatively slow, microservice architecture delivery is relatively faster

97. A large Internet company is planning to deploy a test environment on Huawei Cloud. The operation and maintenance director requires that when purchasing an elastic cloud server, in addition to the system disk, an additional data disk must be added, and the IOPS limit of the data disk must be higher than the upper limit. 2,220, the cloud disk with the lowest IOPS burst limit value higher than 6,500 and the lowest cost.

Which of the following descriptions about EVS types of cloud disks is most suitable? (Multiple choice)

Universal SSD Cloud Disk

Ultra-high IO cloud hard disk

High IO Cloud Disk

Extremely fast SSD cloud hard disk

98. Which of the following descriptions about elastic file services are correct? (Multiple choice)

Concept, providing on-demand scalable high-performance file storage, providing shared access to multiple cloud servers on the cloud

Store all data in a log, which stores files, and organizes and presents data in a hierarchical structure of files and folders

Access method, mounted and used in the cloud server through network protocol, supports NFS and CFS network protocols

Applicable scenarios, suitable for big data analysis, static website hosting, database and gene sequencing, etc.

99. A peering connection refers to a network connection between two VPCs. In the following descriptions about the peering connection between VPCs created under the same account and the peering connection between cross-accounts, which items are correct? (Multiple choice)

Communicate between two VPCs by using public IP addresses

You can create a peering connection between your own VPC and the VPC of other accounts

Under the same account, after creating a peer-to-peer connection, you can configure routing information without confirmation

Peering connections cannot be created between VPCs in different regions

100. Please match the relevant concepts about the microservice engine with their corresponding descriptions in the following options.

Page 11 of 13

101. Which of the following descriptions about the typical cloud computing three-tier architecture is correct? (Multiple choice)

In the data layer, relational database, it is recommended to use Huawei Cloud RDS service directly

Data archive logs or logical backups can be saved in the VBS cloud hard disk backup service

Ensure that the web server and application server nodes are self-shortening and adaptive to business load through elastic scaling of AS

ECS at the same layer recommends affinity deployment

102. What are the advantages of Huawei cloud database RDS compared with self-purchased servers to build databases? (Multiple choice)

Deployment expansion: ApsaraDB for RDS elastic expansion, opened on demand, self-built database needs to purchase hardware that matches the original equipment, the overall cycle is longer

Data backup: ApsaraDB for RDS supports automatic and manual backups, and also supports custom backup storage periods. Self-built databases need to purchase backup equipment, specify settings and post-maintenance by yourself

Maintenance cost: cloud database RDS basically does not require operation and maintenance, and self-built databases require more labor costs

Resource utilization, cloud database RDS is settled on an annual basis. Compared with monthly settlement, the cost is higher. Self-built databases need to consider the peak value. During peak business periods, the resource utilization rate is low

103. Data replication service DRS supports data circulation between multiple data sources, complete capabilities of real-time migration, backup migration, real-time synchronization, data subscription and real-time disaster recovery

True

False

104. Cloud native 2.0 is a new stage of enterprise intelligence upgrade. Enterprise cloudification has moved from "ON Loud" to "IN Cud", becoming a "new cloud native enterprise". Which of the following descriptions about cloud native 2.0 is wrong?

The enterprise's new business capabilities are built on the basis of cloud native, making it born in the cloud

Existing capabilities are inherited in an unbreakable way and organically synergized with new capabilities

The full life cycle of applications, data and AI is completed on the cloud, making it longer than the cloud

Using cloud container services to provide services belongs to cloud native 2.0

105. Cloud database for RDS can support four database engines: MySQL, PostgreSQL, Oracle and Microsoft SQL Server.

True

False

106. SDRS, a storage disaster recovery service, has the advantages of data consistency, highly cost performance, flexible configuration, and simple operation. Among them, data consistency can be achieved by synchronous replication and asynchronous replication of data

True

False

107. When an attacker uses multiple compromised computers on the network as attack machines to launch a DDoS attack on a specific target, it is called a distributed denial-of-service attack (DDoS).

Which of the following options are common DDoS attacks? (Multiple choice)

Data Link Layer Attacks

Transport Layer Attacks

Presentation Layer Attacks

Network Layer Attacks

108. An e-commerce user wants to reduce operation and maintenance costs and realize operation and maintenance automation.

At the same time, the resources used on the cloud can be regulated and the irregularly used or vacant resources can be cleaned up in a timely manner. Which of the following services can meet the needs of users? (Multiple choice)

Cloud Monitor CES

Cloud Audit CTS

Application operation and maintenance management service AOM

Application performance management service APM

109. HUAWEI CLOUD provides users with a variety of storage services, and their features and usage methods are quite different. Please match the following storage types and access methods.

形状, 矩形

中度可信度描述已自动生成

110. In scenarios where traffic increases rapidly in a short period of time, such as commodity spikes and snap-ups, in order to prevent the back-end application from being suppressed, Kafka can be used to transfer requests between the front-end and back-end systems

True

False

Page 12 of 13

111. Under the same specifications, which of the following types of ECS instances has the strongest computing performance?

H3. 8xlarge. 4

C7. 1arge. 2

T6. xlarge. 1

S7. large. 2

112. Which of the following descriptions about various network cloud services is wrong?

The NAT gateway is the window between the VPC, the Internet, and the private network, and supports cross-subnet deployment and cross-AZ deployment.

VPC Endpoint can enable connections between different VPCs, enabling cross-VPC service access

Cloud resolution service DNS allows services in the cloud to access the public network

Elastic public network IP supports binding with NAT gateway

113. A game company deploys its business on a cloud server equipped with a Linux system, and uses the cloud hard disk service to back up its log data. At present, the operation and maintenance personnel find that the disk usage rate has reached 80%, and the cloud hard disk needs to be expanded. After the operation and maintenance personnel perform the capacity expansion operation, they find that the capacity of the cloud disk has not increased. Possible reason: The engineer only expanded the capacity of the disk, but did not format the expanded part, resulting in the hard disk space being expanded cannot be used normally.

True

False

114. Huawei Cloud provides cloud container engine service CCE and cloud container instance service CCI to provide customers with elastic and high-performance enterprise-level container services. Which of the following descriptions about the two is correct? (Multiple choice)

When using the CCI service, users do not need to create separate clusters

Both support Kata secure containers

The service networks of CCE and CCI cannot communicate with each other, and need to communicate through ingress

Both can provide container services based on Kubernetes clusters

115. When using the microservice engine CSE, configuration restrictions are also required. In the following description of CSE permission configuration, which items are correct? (Multiple choice)

User roles and policy configurations can only be assigned through enterprise projects

According to the granularity of authorization, it can be divided into roles and policies

By default, the newly created IAM user does not have any CSE operation permissions

CSE resources cannot be divided by physical area

116. Kubernetes cluster includes laster node and Node node, and llaster is the control node of the cluster. In order to ensure the high availability of the cluster, multiple Jaster nodes are usually deployed. Which of the following components does an Ilaster node mainly consist of? (Multiple choice)

Scheduler

API Server

Kubelet

Eted

117. An Internet company uses Huawei Cloud to deploy its business. The operation and maintenance personnel found that the weekly traffic peak basically occurs on Friday night, which is about 30% to 40% higher than usual, resulting in slow business response. The company decided to purchase new resources (cloud services such as AS+ECS) on Huawei Cloud to solve this problem. Considering factors such as cost, which of the following payment methods is the most appropriate when choosing an elastic cloud server?

Annual subscription b. on demand

Monthly subscription

bidding

118. Huawei Cloud Container Engine CCE can provide highly scalable and high-performance enterprise-level kubernetes clusters. Which of the following descriptions about Huawei Cloud Container Engine CCE is correct?

Containers deployed through CCE only support isolation in the form of Cgroups

The nodes of CCE can be divided into Master-node, Node node and Backup node

Node nodes can choose ECS, BMS, DeH and other hosts

Provide highly scalable, high-performance enterprise-level Kubernetes: cluster

119. A customer wants to use an elastic cloud server. The server is required to be able to process high-quality images and videos, have large memory, large data processing and high 1/0 concurrency. At the same time, it satisfies the scenarios that can complete fast data processing and a large amount of computing power. Usually, it is recommended to use a disk-enhanced ECS.

True b. wrong

120. On Huawei Cloud, images can be divided into public images, private images, shared images, ()

Page 13 of 13

121. When operating HUAWEI CLOUD games, the game rankings can be stored in a document database, and information about users and players, such as user equipment and user points, can be stored in the cache data.

True

False

122. The elastic cloud server ECS can switch the system disk by switching the operating system. Which description is wrong?

Support X86 architecture and Kunpeng architecture servers to switch between operating systems

Switching the operating system does not affect the data on the data disk

After the switch is completed, the system disk ID of the ECS will change, and the original system disk will be deleted.

Images that support switching include public images, private images, shared images, and market images

123. As the overall solution for Huawei Cloud database migration, the database migration tool set is very important.

Which of the following is true about the description of the toolset? (Multiple choice)

Traffic playback: perception of business stability and performance in advance through business simulation?

Data migration: log-based real-time change data capture

Data verification, real-time verification of log-based incremental data

Syntax migration, evaluate and convert heterogeneous database syntax

124. The Internet of Things is an important part of the new generation of information technology, and it is also an important development stage in the "informationization" era. If the factory connects the production line equipment to the 1oT platform to monitor, analyze and warn the equipment in real time, the equipment can be effectively improved. Use efficiency.

HUAWEI CLOUD provides an IoT solution. Which of the following descriptions about this solution is wrong?

If you build an IOT management platform on HUAWEI CLOUD, you can also choose HUAWEI CLOUD AppCube to realize visualization, and use the message notification service SIN to complete message notification

Device access service IOTDA supports billion-level device access and millions-level high concurrency

The global SIN connection service provides network traffic for device data transmission to the cloud. There are three operators to choose from. When switching operators, you need to change the card

The IoT data analysis service adopts a graphical binge method, and has rich words calculation operators, which can seamlessly connect with AI

125. An Internet company has deployed a new business system through Huawei Cloud, and now needs to set different access permissions for employees to achieve permission isolation between different employees. It is usually recommended that the company use the unified identity authentication service IAM for fine-grained permission management.

True b. wrong

126. Which of the following statements about situational awareness and services are correct? (Multiple choice)

For the detected security threats, generate and deliver security policies in one key, and form a security linkage with security defense products. Access to Huawei Cloud

Deploy flow probes and intrusion detection systems to collect network traffic, and at the same time collect logs from security devices such as DDoS, Web firewalls, and host security to the security threat analysis platform

Establish different threat models and conduct learning analysis through big data to identify major security threats

Possess core system operation and maintenance and security audit control functions, meet security compliance review requirements, and provide users with a safe and unified operation and maintenance management platform

127. In the configuration of Situational Awareness SA, the maximum host quota refers to the maximum number of authorized detection hosts. It is recommended that the maximum host quota not be lower than the total number of hosts under the current account when purchasing.

True

False

Facebook Twitter LinkedIn Google + Email