ACA-CloudNative Sample Questions Answers

True

False

Kubernetes Cluster Federation

Auto Scaling to Serverless Kubernetes

Register External Kubernetes Cluster to be managed from Alibaba Cloud Container Service Console

Manage every clusters manually but to connect to the same image repository

Agile and Rapid Development of Business Functionalities

Failure Isolation and Predictability

Replaceability

Agile Deployment and Scalability

Service Governance

True

False

True

False

True

False

True

False

Alibaba Cloud provides 3 levels of security: Infrastructure, Software supply chain, and Runtime

Security

At the Infrastructure layer, Alibaba Cloud Container Service for Kubernetes (ACK) integrates

RAM to achieve authN (Authentication) and RBAC authZ (Authorization)

For Software Supply Chain, Alibaba Cloud provides Image Signing and Image Scanning to

make docker images are secure

Fur Runtime Security, ACK provides network policy based on Flannel and Terway networks

Security Center can defend application runtimes on ACK, and it also can detect attacks within

ACK.

ACK supports Sandboxed containers, which provide an independent kernel to enable enhanced security isolation

Deployment

DeamonSet

Sidecar

StatefulSet

Configure Kubernetes standard output in Import Data by Log Service console

Configure where to store logs in each pod

Local K8S

Alibaba Cloud Kubernetes

Google Kubernetes Engine

Azure Kubernetes Service

AWS redshift

True

False

Easy to scale out

Easy to manage

Reduce cost of software development

Reduce for bandwidth used for software application

True

False

Flannel

Tcrway

VPN

GA

Scaling out to 500 Pods takes about 30s

Scaling out to 500 Pods takes about 50s

Scaling out to 500 Pods takes about 90s

Log Service

ARMS

ARMS-Prometheus

Cloud Monitor

Arena is a CLI tools for machine learning achieve Al task scheduling

Arena is a machine learning framework for Al

Arena developed by alibaba cloud and contribute to kubeflow

Arena developed by alibaba cloud and contribute to kubernetes

True

False

When creating an Alibaba Cloud Container Service for Kubernetes (ACK) cluster, an

ingress dashboard can be installed at creation time.

LogStore can be installed via app catalog.

The Logtail-ds component can be installed by using ACK cluster add-ons.

ACR is able to replicate images across regions

ACR provides vulnerability scanning for uploaded images

ACR can manage helm charts

ACR's standard version includes cross-region image replication

Image scanning

Intelligent building

Global distribution

Automatic trigger

Image runtime defense

Gang

Topology aware

Spread

Binpack

Bundle

Accelerates remote data reading for AI training jobs, and reduces GPU/CPU waiting time

Supports different storage backends including OSS/HDFS/NAS

Multiple cache layers, including RAM/SSD/HDD

Supports preload once, and reads by many jobs

Supports horizontal scaling

Replicates 3 copies of local data to avoid data loss

Composable workflow, support continuous training pipelines,

Scale out training out to hundreds of nodes

Support heterogeneous resources management, such as GPU, FPGA, RDMA.

All resources are free

Logservice

ARMS

ARMS-Prometheus

Cloud Monitor

True

False

Tighly coupled monolith

Microservices

Client server

Agile

Emerging from trial and error

True

False

Supports policy-based global distribution

Global distribution is automated

It provides a high success rate and low latency

Global distribution needs to be triggered manually

Requirement Gathering and analysis, System Design, Implementation, Integration and Testing, Deployment of system, Maintenance

Code Repository, Build + Unit Test+Code Quality, Test Script.Test Suite, Provisioning to Containers, deploy as Microservlces

Design Thinking, Backlog, User Story Mapping, Epic, List of Microservices

Requirement of Gathering and analysis as well as modular System Design per module, and then deploy applications to Cloud Provider

Logs

Metrics

APM tracing

All above

ACR EE allows you to perform security scans on all Linux-based images

You can receive vulnerability assessments and recommendations

With the cloud-native delivery chain, the system will automatically block the deployment of

high-risk images

With the cloud-native delivery chain, an attacker can deploy an unsigned image on the ACK

cluster E. By default, a newly created ACR EE is connected to all networks

Log Service (Ingress)

SLB

CMS

Network

True

False

True

False

True

False

Alibaba Cloud ElasticSearch provide self-build Analyser

Alibaba Cloud ElasticSearch cluster can be expanded

Alibaba Cloud ElasticSearch cluster can be downsized

You can ssh your Alibaba Cloud ElasticSearch cluster

True

False

Supports continuous training pipelines with composable workflow

Scales out to hundreds of nodes to support AI/ML model training

Supports heterogeneous resource management, including management of GPU, FPGA, and

RDMA-enabled resources

All resources are free

It enable large-scale distribution and policy-based global distribution

P2P based distribution supports docker image snapshots without pulling

P2P based method supports image distribution over more than 10,000 nodes

The snapshot method speeds up image pulling, with pull times as low as 1 second

True

False

True

False