Jason ' s company is running a traditional web application on Alibaba Cloud ECS instances. The company wants to improve efficiency by refactoring the application as microservices that run on containers. The application must be deployed across multiple environments: production and testing. Load for the application is variable, but the minimum load and maximum load are known. As a Cloud Architect, you have been assigned the job of designing the updated application with a serverless architecture that minimizes operational complexity.
Which solution will meet these requirements MOST cost-effectively?

• A. Upload the container images to Serverless App Engine (SAE) and create separate environments and deployments for production and testing. Configure an ALB for each of the SAE deployments.
• B. Upload the container images to Alibaba Cloud Container Registry (ACR) and configure two Alibaba Cloud Container Service for Kubernetes (ACK) Managed clusters to manage the expected load. Deploy services from the ACR images, and configure an ALB for each of the ACK Managed clusters.
• C. Upload the container images to Alibaba Cloud Container Registry (ACR) and configure two Alibaba Cloud Container Service for Kubernetes (ACK) Serverless clusters to manage the expected load.
  Deploy services from the ACR images, and configure an ALB for each of the ACK Serverless clusters.
• D. Upload the container images to Function Compute as functions, and configure a concurrency limit to handle the peak load. Serve the functions over API Gateway.

A multinational corporation is designing its network architecture on Alibaba Cloud to support its distributed applications. Their requirements include:
* Private and high-speed connectivity between on-premises data centers and Alibaba Cloud VPCs across multiple regions.
* Centralized management and enforcement of network security policies.
* Comprehensive monitoring and logging of all network traffic for compliance and auditing purposes.
Which combination of Alibaba Cloud services should the corporation implement to meet these requirements MOST effectively? (Correct answers: 2)

• A. Deploy multiple VPN Gateways in each region and manage connections individually.
• B. Set up Cloud Enterprise Network (CEN) and integrate with Simple Log Service.
• C. Use Alibaba Cloud Express Connect with Transit Router and integrate with Security Center.
• D. Deploy Alibaba Cloud Global Accelerator for all inter-region traffic routing.
• E. Implement VPC peering between all regional VPCs and utilize Security Groups for access control.

Clarence runs a retail company that hosts an e-commerce website on Alibaba Cloud across multiple Alibaba Cloud regions. Clarence wants the website to be operational at all times to ensure customers can make purchases around the clock. The website stores data in a PolarDB for MySQL instance.
Which of the following solutions will provide the HIGHEST availability for the database?

• A. Utilize the Global Database Network (GDN) to establish cross-region clusters for PolarDB, enabling both read and write operations across multiple regions. In case of a failure, seamlessly direct traffic to a secondary region that can serve as the primary node, maintaining high availability and minimal downtime.
• B. Deploy the Cluster Edition of PolarDB for MySQL to ensure that the system can elect a new primary node from read-only nodes when the primary node fails. Ensure that the website is configured to reconnect to the cluster after the failover.
• C. Configure cross-region backup and restoration in PolarDB. During disruptions, restore the latest backup set to a new PolarDB cluster in another region. Redirect application traffic to this restored cluster and configure read/write splitting for this cluster.
• D. Create two PolarDB for MySQL clusters configured with read/write splitting in two different regions.
  When a region fails, use Function Compute to replicate the data in the read-only nodes to the healthy region. Then, configure the website to fail over to the healthy region.

Belinda is designing an API-driven cloud communications platform. The application is hosted on Elastic Compute Service (ECS) instances behind a Network Load Balancer (NLB). It leverages API Gateway to serve public-facing APIs to customers. For security reasons, Belinda wants to protect the platform against web exploits like SQL injection and large, sophisticated DDoS attacks.
Which combination of solutions provides the MOST protection? (Correct answers: 2)

• A. Use Alibaba Cloud Security Center with Anti-DDoS Basic.
• B. Use Alibaba Cloud Web Application Firewall (WAF) to protect API Gateway.
• C. Use Alibaba Cloud Anti-DDoS Proxy to protect the NLB.
• D. Use Alibaba Cloud Web Application Firewall (WAF) to protect the NLB.

A healthcare organization is deploying its patient management system on Alibaba Cloud. They require:
* Secure, private connectivity between their on-premises servers and Alibaba Cloud VPCs.
* Automated failover to ensure connectivity during outages.
* Scalable bandwidth to handle varying data loads without manual intervention.
Which Alibaba Cloud service should the organization implement to meet these requirements?

• A. VPC peering between VPCs
• B. VPN Gateway
• C. NAT Gateway
• D. Express Connect with Redundant Connections