H13-821_V3.0-ENU 試験問題を無料オンラインアクセス

By configuring network ACL and security group policy, the safe use of servers in VPC can be guaranteed. The security group mainly protects the server, and the network ACL mainly protects the subnet.

• A.True
• B.False

Cloud native 2.0 is a new stage of enterprise intelligence upgrade. Enterprise cloudification has moved from "ON Loud" to "IN Cud", becoming a "new cloud native enterprise". Which of the following descriptions about cloud native 2.0 is wrong?

• A.The enterprise's new business capabilities are built on the basis of cloud native, making it born in the cloud
• B.Using cloud container services to provide services belongs to cloud native 2.0
• C.The full life cycle of applications, data and AI is completed on the cloud, making it longer than the cloud
• D.Existing capabilities are inherited in an unbreakable way and organically synergized with new capabilities

The cloud container engine CCE service implements cloud storage service access capabilities based on the Kubernetes community container storage interface (CSI, Container Storage Interface). Through this interface, storage services can be provided for the container orchestration engine. The supported container storage types include: local Disk storage, cloud storage volume, file storage volume, object storage volume, file storage volume, snapshot and backup.

• A.True
• B.False

The elastic public network IP can be flexibly bound and unbound with resources such as elastic cloud servers, bare metal servers, elastic load balancing, and NAT gateways. It has a variety of flexible billing methods to meet the needs of various business scenarios.
But there are also many constraints and restrictions. Which of the following descriptions about constraints and restrictions is wrong?

• A.Only unbound EIP addresses can be released. Bound EIP addresses need to be unbound before they can be released.
• B.An elastic public IP can only be bound to one cloud resource, and the elastic public IP and cloud resources must be in the same region
• C.Only unbound EIPs can be bound
• D.After the elastic public network IP is released, if it is used by other users, you can submit a work order to apply for retrieval

There are significant differences between peering connections and VPC endpoints in terms of security, communication clearance, and routing configuration.
Which of the following statements about the comparison between the two is wrong?

• A.Routing configuration, after creating a peering connection, you need to add the routing information of the peering connection, and the VPC terminal node service has already configured the corresponding routing information for the user, and the user does not need to configure it again
• B.Security, all elastic cloud servers in the virtual private cloud can be accessed by peer-to-peer connections, while VPC terminal nodes can only access single cloud servers created with ndpoint Service, etc.
• C.CDR overlap, both peering connections and VPC endpoints are supported
• D.Communication direction, two-way communication is supported between two virtual private clouds that establish a peer-to-peer connection, and the VPC terminal node only supports the designated port of the VPC where the terminal node is located to access the back-end resource where the terminal node service is located