Download PrepIQ ACA Developer ACA Developer Ultimate Exam and more Exams Technology in PDF only on Docsity!
Developer Ultimate Exam
Question 1. Which of the following best describes the “Config” factor of the Twelve-Factor App methodology? A) Hard-coded values B) Environment variables C) Configuration files D) Database schema Answer: B Explanation: Configurations are stored in environment variables to keep code portable across environments. Question 2. In a microservices architecture, the preferred method for inter-service communication when low latency is required is: A) Synchronous HTTP REST calls B) Asynchronous message queues C) Direct database access D) FTP file transfer Answer: A Explanation: Synchronous HTTP/HTTPS calls provide the fastest round-trip for request-response patterns. Question 3. Which Alibaba Cloud tool is primarily used for declarative infrastructure provisioning? A) ROS (Resource Orchestration Service) B) CloudMonitor C) Simple Log Service D) Function Compute Answer: A Explanation: ROS allows you to define resources as code in JSON/YAML templates. Question 4. When defining a CI/CD pipeline on Alibaba Cloud, which service is responsible for automatically building Docker images from source code? A) Container Registry (ACR) B) CodePipeline C) Function Compute D) Server Load Balancer Answer: B Explanation: CodePipeline orchestrates source, build, and deployment stages, including Docker image creation.
Developer Ultimate Exam
Question 5. Which RocketMQ feature enables reliable event-driven communication between decoupled services? A) Topic subscription B) Direct queue binding C) Transactional messages D) Message tagging Answer: C Explanation: Transactional messages ensure that a message is delivered only if the associated business transaction succeeds. Question 6. Which trigger type can NOT be used to invoke an Alibaba Cloud Function Compute (FC) function? A) HTTP request B) OSS object upload C) MySQL query D) Log Service alarm Answer: C Explanation: FC does not support direct triggers from relational database queries. Question 7. Which programming language is NOT natively supported by Function Compute? A) Node.js B) Python C) Go D) Ruby Answer: D Explanation: As of the current release, Ruby is not listed among the supported runtimes. Question 8. In Function Compute, environment variables are stored: A) In the code package B) In the RAM policy C) As key-value pairs in the function configuration D) In the OSS bucket Answer: C Explanation: Environment variables are defined in the function’s configuration and injected at runtime. Question 9. What is the purpose of a “function version” in FC? A) To limit concurrent executions B) To roll back to a previous code state C) To assign a unique RAM role D) To enable multi-region deployment
Developer Ultimate Exam
Explanation: ACR is a private repository for storing and pulling container images. Question 14. ASK (Serverless Kubernetes) differs from standard ACK primarily because: A) It does not support Pods B) It automatically scales nodes to zero when idle C) It requires manual node provisioning D) It only runs Windows containers Answer: B Explanation: ASK abstracts the underlying nodes, scaling them down to zero when no workloads exist. Question 15. Elastic Container Instances (ECI) are best used for: A) Long-running stateful services B) Short-lived batch jobs without managing clusters C) Persistent databases D) DNS management Answer: B Explanation: ECI runs containers on demand without the need to manage a Kubernetes cluster. Question 16. In OSS, which feature allows you to generate a time-limited URL for private objects? A) Bucket policy B) Signed URL C) Lifecycle rule D) Versioning Answer: B Explanation: Signed URLs embed authentication parameters and expiration timestamps. Question 17. To host a static website on OSS, which bucket configuration must be enabled? A) Server-Side Encryption B) Static website hosting C) Cross-region replication D) Intelligent-tiering Answer: B Explanation: Enabling static website hosting maps HTTP requests to objects in the bucket.
Developer Ultimate Exam
Question 18. Which OSS bucket policy statement element defines who can access the bucket? A) Action B) Effect C) Principal D) Resource Answer: C Explanation: The “Principal” element specifies the AWS/Alibaba Cloud account or IAM entity. Question 19. When connecting an ApsaraDB RDS instance from a VPC, which method provides the most secure access? A) Public internet endpoint B) Whitelisting all IPs C) Using a VPC endpoint D) Disabling SSL Answer: C Explanation: VPC endpoints keep traffic within the private network and avoid exposure to the internet. Question 20. Read/write splitting in RDS is primarily achieved by: A) Enabling multi-AZ deployment B) Configuring a read-only replica C) Using table partitioning D) Turning on automatic backups Answer: B Explanation: A read-only replica handles SELECT queries, offloading the primary instance. Question 21. Which parameter is most important for tuning MySQL InnoDB buffer pool size? A) max_connections B) innodb_buffer_pool_size C) query_cache_size D) thread_cache_size Answer: B Explanation: The buffer pool stores data and indexes in memory, directly affecting performance.
Developer Ultimate Exam
Explanation: Throttling limits the number of requests per second per API. Question 27. OpenAPI Explorer primarily helps developers to: A) Deploy containers B) Generate SDK code snippets C) Monitor CPU usage D) Encrypt data at rest Answer: B Explanation: It allows testing APIs and auto-generating client code in various languages. Question 28. In RAM, a policy written in JSON that allows “ecs:CreateInstance” on all resources is an example of: A) A role B) A user C) An inline policy D) A resource group Answer: C Explanation: Inline policies are attached directly to a user, group, or role. Question 29. Which RAM entity is used to grant temporary credentials to an ECS instance without embedding AccessKeyId/Secret? A) RAM user B) RAM group C) RAM role D) RAM policy Answer: C Explanation: RAM roles can be attached to ECS instances, providing temporary STS tokens. Question 30. The default encryption method for data stored in OSS is: A) Server-Side Encryption with KMS B) Client-Side Encryption C) No encryption D) AES-256 Transparent Encryption Answer: A Explanation: OSS supports Server-Side Encryption using KMS by default. Question 31. Which WAF feature blocks SQL injection attacks? A) IP blacklist B) Rate limiting C) Signature rule set D) SSL termination
Developer Ultimate Exam
Answer: C Explanation: Signature rule sets contain patterns for common SQL injection payloads. Question 32. To encrypt a secret string before storing it in RDS, which service should be used? A) KMS B) CloudMonitor C) Log Service D) Function Compute Answer: A Explanation: KMS provides managed key generation and encryption APIs. Question 33. In CloudMonitor, a custom metric can be created by: A) Uploading a CSV file B) Using the PutCustomMetricData API C) Enabling auto-discovery D) Defining a RAM policy Answer: B Explanation: PutCustomMetricData allows applications to push arbitrary metric data. Question 34. An alarm rule that triggers when CPU usage exceeds 80 % for 5 minutes is an example of: A) A proactive alert B) A scaling policy C) A billing alarm D) A log query Answer: A Explanation: Alarms monitor resource metrics and notify when thresholds are breached. Question 35. Logtail in Simple Log Service (SLS) is used to: A) Store container images B) Collect and ship application logs C) Encrypt data at rest D) Manage DNS records Answer: B Explanation: Logtail agents forward logs from ECS, containers, or functions to SLS.
Developer Ultimate Exam
Question 40. Which of the following is NOT a valid lifecycle rule action for OSS objects? A) Transition to IA storage B) Delete after expiration C) Replicate to another bucket D) Change object ACL to public-read Answer: D Explanation: Lifecycle rules cannot modify ACLs; they only handle transition, deletion, or replication. Question 41. To enable blue-green deployment using CodePipeline and ACK, you would primarily use which ACK resource? A) DaemonSet B) Service C) Deployment with two replica sets D) Ingress Answer: C Explanation: Two replica sets allow traffic shifting between old and new versions. Question 42. Which RAM policy effect value explicitly denies an action, overriding any allow statements? A) Allow B) Deny C) NotAction D) Condition Answer: B Explanation: “Deny” takes precedence over “Allow” in policy evaluation. Question 43. When configuring a VPC endpoint for RDS, the traffic between ECS and RDS travels over: A) Public internet B) VPN tunnel C) Private VPC network D) Direct Connect Answer: C Explanation: VPC endpoints keep traffic within the Alibaba Cloud private network. Question 44. Which of the following is a true statement about Alibaba Cloud’s “Resource Orchestration Service” (ROS) templates? A) They must be written in XML B) They support parameter validation C) They cannot create RAM roles D) They are executed manually only
Developer Ultimate Exam
Answer: B Explanation: ROS templates support parameter definitions and validation rules. Question 45. In Function Compute, which of the following statements about “reserved concurrency” is correct? A) It limits the maximum number of concurrent executions B) It disables scaling C) It guarantees zero cold starts D) It disables environment variables Answer: A Explanation: Reserved concurrency caps concurrent invocations to prevent resource exhaustion. Question 46. Which Alibaba Cloud service provides a managed NoSQL document database? A) ApsaraDB for RDS B) Table Store (OTS) C) PolarDB D) AnalyticDB Answer: B Explanation: Table Store is a NoSQL key-value/document store. Question 47. To securely store API keys used by a Function Compute function, you should: A) Hard-code them in the code B) Store them in OSS C) Use RAM role temporary credentials D) Place them in environment variables without encryption Answer: C Explanation: RAM role temporary credentials avoid long-term secret exposure. Question 48. Which CloudMonitor metric would you monitor to detect memory leaks in a Java application running on ECS? A) CPUUtilization B) NetworkIn C) MemoryUsed D) DiskReadOps Answer: C
Developer Ultimate Exam
Question 53. In Redis, the command to set a key with an expiration of 60 seconds is: A) SETEX mykey 60 value B) EXPIRE mykey 60 C) SET mykey value EX 60 D) All of the above Answer: D Explanation: All listed commands achieve a 60-second TTL. Question 54. Which of the following is the correct order of steps to deploy a container image to ACK? A) Push to ACR → Create Deployment → Create Service B) Create Service → Push to ACR → Create Deployment C) Create Deployment → Push to ACR → Create Service D) Push to ACR → Create Service → Create Deployment Answer: A Explanation: Image must exist in ACR before Deployment references it; Service is created after Deployment. Question 55. To enforce that only HTTPS traffic reaches an API Gateway endpoint, you must configure: A) CORS B) Protocol enforcement C) SSL certificate D) IP whitelist Answer: B Explanation: Protocol enforcement redirects or rejects non-HTTPS requests. Question 56. Which of the following is NOT a valid trigger source for Function Compute? A) OSS event B) Log Service alarm C) Scheduled CRON D) Direct database query Answer: D Explanation: Direct database queries cannot trigger FC functions. Question 57. When using KMS to encrypt data, the data key is: A) Stored permanently in KMS B) Returned encrypted and plaintext to the caller C) Never exposed to the application D) Managed only for OSS objects
Developer Ultimate Exam
Answer: B Explanation: KMS returns both encrypted and plaintext data keys; the plaintext is used for encryption and then discarded. Question 58. Which CloudMonitor alarm action can automatically remediate a high-CPU situation? A) Send SMS B) Execute Function Compute C) Trigger scaling policy D) Archive logs Answer: C Explanation: Scaling policies can add resources when CPU exceeds thresholds. Question 59. In RAM, a “policy document” must contain which top-level element? A) Version B) Statement C) Effect D) Resource Answer: B Explanation: The “Statement” element defines actions, resources, and effect. Question 60. Which of the following best describes “immutable infrastructure” as applied to container deployments? A) Updating containers in place B) Replacing the entire container image for changes C) Modifying the host OS D) Using shared volumes for state Answer: B Explanation: Immutable infrastructure replaces the whole image rather than patching running containers. Question 61. Which of the following is a benefit of using OSS lifecycle policies for log files? A) Immediate deletion after write B) Automatic transition to cheaper storage C) Real-time indexing D) Encryption key rotation Answer: B
Developer Ultimate Exam
Explanation: RollingUpdate updates pods incrementally while keeping the service available. Question 66. Which of the following is NOT a valid way to secure Function Compute environment variables? A) Encrypt values with KMS before storing B) Use RAM role temporary credentials C) Store plaintext in the console D) Use secret manager integration Answer: C Explanation: Storing plaintext directly exposes secrets. Question 67. In Simple Log Service, which query clause is used to filter logs by a specific field value? A) WHERE B) FILTER C) SELECT D) GROUP BY Answer: A Explanation: The WHERE clause applies conditional filters. Question 68. Which of the following is a correct statement about Alibaba Cloud’s “Resource Tags”? A) Tags can be assigned only to ECS instances B) Tags are immutable after creation C) Tags can be used for cost allocation D) Tags replace RAM policies Answer: C Explanation: Tags enable cost tracking and resource grouping. Question 69. When using Terraform with ROS, the “depends_on” meta-argument is used to: A) Define variable defaults B) Explicitly set resource creation order C) Encrypt state files D) Generate random passwords Answer: B Explanation: “depends_on” forces Terraform to create resources in a specific sequence.
Developer Ultimate Exam
Question 70. Which of the following is the most appropriate way to limit the size of uploaded objects to OSS? A) Set bucket ACL B) Define a lifecycle rule C) Configure a bucket policy with “content-length-range” D) Enable versioning Answer: C Explanation: The “content-length-range” condition in a bucket policy restricts object size. Question 71. In a microservice architecture, which pattern helps avoid cascading failures when a downstream service becomes unavailable? A) Circuit Breaker B) Service Mesh C) Monolithic deployment D) Direct DB access Answer: A Explanation: Circuit Breaker isolates failures and prevents overload. Question 72. Which of the following is a valid way to retrieve a temporary STS token in code? A) Call AssumeRole API B) Use AccessKeyId directly C) Read from /etc/passwd D) Query DNS records Answer: A Explanation: AssumeRole returns temporary credentials for the specified RAM role. Question 73. To enforce that all API calls to a specific endpoint are signed, you must enable: A) CORS B) Request validation C) Signature verification D) Rate limiting Answer: C Explanation: Signature verification ensures the request includes a valid HMAC. Question 74. Which of the following statements about “Container Image Scanning” in ACR is true? A) It only scans for license compliance B) It
Developer Ultimate Exam
Question 79. When configuring a RAM policy for “ecs:StopInstance”, which effect should be set to allow the action? A) Allow B) Deny C) NotAction D) Condition Answer: A Explanation: “Allow” grants the specified action. Question 80. Which of the following is the primary benefit of using “Blue-Green” deployment over “RollingUpdate”? A) Simpler configuration B) Zero-downtime with instant rollback C) Lower resource consumption D) No need for load balancer Answer: B Explanation: Blue-Green allows instant traffic switch and immediate rollback. Question 81. In OSS, the “Object Lock” feature is used to: A) Prevent deletion for a retention period B) Encrypt objects C) Version objects automatically D) Enable CDN acceleration Answer: A Explanation: Object Lock enforces WORM (Write-Once-Read-Many) compliance. Question 82. Which of the following statements about “Logtail” agents is false? A) They can ship logs from ECS instances B) They require manual log parsing configuration C) They support JSON log formats D) They can forward logs to SLS only Answer: B Explanation: Logtail automatically detects log files based on configuration; manual parsing is optional.
Developer Ultimate Exam
Question 83. Which of the following is the correct way to reference a secret stored in KMS from a Function Compute environment variable? A) Directly store the ciphertext B) Store the plaintext C) Store the KMS key ID and decrypt at runtime D) Use a RAM policy to expose the key Answer: C Explanation: The function retrieves the key ID, calls KMS Decrypt, and uses the plaintext at runtime. Question 84. In ACK, a “StatefulSet” is used for: A) Stateless web services B) Deploying databases with stable identities C) ConfigMap management D) Horizontal autoscaling only Answer: B Explanation: StatefulSet provides stable network IDs and persistent storage for stateful workloads. Question 85. Which of the following is NOT a valid method to authenticate to ACR when pulling images from an ECS instance? A) Using RAM role credentials B) Using AccessKeyId/SecretKey C) Using a signed Docker login token D) Using a public anonymous pull Answer: D Explanation: ACR requires authentication; anonymous pulls are not allowed. Question 86. When using Terraform to create a RAM user, which resource type should be defined? A) alicloud_ram_user B) alicloud_ram_role C) alicloud_ram_policy D) alicloud_ram_group Answer: A Explanation: alicloud_ram_user creates a RAM user entity. Question 87. Which of the following is a key advantage of using “Serverless Kubernetes (ASK)” for burst workloads? A) Fixed node pool size B)
