Clash for Victory is a popular online game that is hosted on Alibaba Cloud. As latency can have a huge impact on gameplay, the developers for the game want to implement a mechanism to route all requests to the closest access point, monitor the health of the game, and redirect traffic to healthy backend servers.
The game is deployed in multiple regions on Elastic Compute Service (ECS) instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs).
As a Cloud Architect, what course of action would you take?

• A. Create Alibaba Cloud CDN distribution and specify Object Storage Service (OSS) as the origin server.Configure the cache behavior to use origin cache headers.
• B. Create an Alibaba Cloud CDN distribution and specify the ALB as the origin server. Configure the cache behavior to use origin cache headers. Use Function Compute to optimize the traffic.
• C. Configure an ApsaraDB RDS database to serve as the data store for the application. Create a Tair (Redis OSS-Compatible) cluster to act as the in-memory cache for hosting the application data.
• D. Configure a Global Accelerator instance. In each region, add a listener for the port that the game listens on, and attach it to the endpoint group of that region. Add the ALB instances as the endpoint.

Clarence runs a technology services company that uses ApsaraDB RDS. The company wants to streamline their database management and set up a robust access control structure.
Which of the following solutions provides the required functionality with the LEAST operational overhead?

• A. Implement access control via IP whitelist to control who has access to the database.
• B. Use RAM policies to restrict access to databases and implement ActionTrail to audit actions performed on the database.
• C. Use the permission management feature of Data Management Service (DMS) to control and audit user access to databases.
• D. Set up a WAF instance in front of the database to block SQL injection attempts and ensure the security of the data.

Alisa ' s company recently migrated to Alibaba Cloud and wants to implement a solution to protect the traffic that flows in and out of the production VPC. Their previous on-premises solution had an inspection server that performed specific operations such as traffic flow inspection and traffic filtering. The company wants to have the same functionalities on Alibaba Cloud.
Which of the following solutions will meet these requirements?

• A. Utilize Alibaba Cloud Traffic Mirroring to replicate traffic flow for analysis and filtering by other tools.
• B. Set up Alibaba Cloud Log Service to collect traffic logs from the VPC to inspect traffic patterns.
• C. Deploy Alibaba Cloud Security Center for monitoring and inspecting VPC traffic.
• D. Use Alibaba Cloud Cloud Firewall for direct traffic inspection and filtering within the production VPC.

A multinational corporation is designing its network architecture on Alibaba Cloud to support its distributed applications. Their requirements include:
* Private and high-speed connectivity between on-premises data centers and Alibaba Cloud VPCs across multiple regions.
* Centralized management and enforcement of network security policies.
* Comprehensive monitoring and logging of all network traffic for compliance and auditing purposes.
Which combination of Alibaba Cloud services should the corporation implement to meet these requirements MOST effectively? (Correct answers: 2)

• A. Deploy multiple VPN Gateways in each region and manage connections individually.
• B. Deploy Alibaba Cloud Global Accelerator for all inter-region traffic routing.
• C. Implement VPC peering between all regional VPCs and utilize Security Groups for access control.
• D. Set up Cloud Enterprise Network (CEN) and integrate with Simple Log Service.
• E. Use Alibaba Cloud Express Connect with Transit Router and integrate with Security Center.

A global hotel chain is migrating its reservation system to Alibaba Cloud. The system must provide high availability across multiple regions, ensure data consistency, and support real-time updates to prevent double bookings. Additionally, the system should integrate with third-party payment gateways securely.
Which combination of Alibaba Cloud services should the hotel chain implement to architect this reservation system effectively? (Correct answers: 3)

• A. Set up Object Storage Service (OSS) for storing reservation logs with versioning enabled.
• B. Utilize Function Compute for processing payment gateway integrations.
• C. Use PolarDB with Global Database for real-time data replication and consistency.
• D. Deploy ECS instances in multiple regions with Application Load Balancer (ALB) for traffic distribution.