Solutions Architect (Expert)

0/8 checked

Q_01 domain/d1 · medium single discuss →

A gaming company hosts an origin server outside Alibaba Cloud and needs to hide its origin IP address while defending against both volumetric and application-layer attacks. Which Anti-DDoS option best fits this requirement?

A Anti-DDoS Basic (Free Edition), which is enabled by default on every public IP
B Anti-DDoS Origin, which integrates natively with ECS and SLB with no DNS changes
C Anti-DDoS Pro and Anti-DDoS Premium, using DNS redirection or IP pointing through globally distributed nodes
D Blackhole filtering configured on the origin IP address

Q_02 domain/d1 · medium single discuss →

An ECS instance protected only by the free Anti-DDoS edition is targeted by an attack that peaks at 40 Gbps. What outcome should the architect expect for legitimate users?

A Only the malicious traffic is scrubbed; legitimate users continue to be served normally
B Blackhole filtering is triggered and all traffic to the attacked IP is dropped, causing a complete service disruption
C Burstable protection automatically activates and absorbs the excess traffic
D Advanced mitigation pools all scrubbing centers to fully absorb the 40 Gbps attack