100+ Free Alibaba ACP Cloud Computing Practice Questions

Pass your Alibaba Cloud Certified Professional - Cloud Computing (ACP-Cloud1) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

Not published Pass Rate

100+ Questions

100% Free

1 / 100

Question 1

Score: 0/0

An architect is designing a high-performance compute (HPC) workload that needs the lowest possible latency between nodes and direct hardware access without a hypervisor layer. Which Alibaba Cloud ECS family is the best fit?

ECS general-purpose g7 instance family

ECS Bare Metal Instance (ebmg/ebmgn series)

ECS burstable t6 instance family

ECS storage-optimized i3 instance family

to track

2026 Statistics

Key Facts: Alibaba ACP Cloud Computing Exam

Exam Questions

Alibaba Cloud (ACP-Cloud1)

110 min

Exam Duration

Alibaba Cloud

80/100

Passing Score

Alibaba Cloud

$300

Exam Fee

Alibaba Cloud

2 years

Certificate Validity

Alibaba Cloud

80-120 hrs

Study Time

Recommended

ACP Cloud Computing (ACP-Cloud1) has 70 questions in 110 minutes, requires 80 out of 100 to pass, costs US$300, and is valid for 2 years. The exam tests architecture and operations across ECS (bare metal, GPU, dedicated host), VPC (CEN, VBR, Transit Router, NAT), ALB/NLB, OSS, RDS/PolarDB/PolarDB-X, RAM/KMS/Cloud Firewall, CloudMonitor/ARMS/SLS, ACK, Function Compute, ROS/Terraform, and DR design - real Alibaba Cloud service names with deep design choices.

Sample Alibaba ACP Cloud Computing Practice Questions

Try these sample questions to test your Alibaba ACP Cloud Computing exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1An architect is designing a high-performance compute (HPC) workload that needs the lowest possible latency between nodes and direct hardware access without a hypervisor layer. Which Alibaba Cloud ECS family is the best fit?

A.ECS general-purpose g7 instance family

B.ECS Bare Metal Instance (ebmg/ebmgn series)

C.ECS burstable t6 instance family

D.ECS storage-optimized i3 instance family

Explanation: ECS Bare Metal Instances (ebmg, ebmgn, ebmhfg series) provide direct access to physical CPU and memory resources with no virtualization overhead. They are designed for HPC, latency-sensitive databases, and licensing scenarios that require single-tenant physical hardware while still being fully integrated with VPC, OSS, and other Alibaba Cloud services.

2A team is training large language models that require GPU peer-to-peer NVLink communication and high-bandwidth eRDMA networking between nodes. Which ECS instance family is most appropriate?

A.ECS gn6i (T4) instances

B.ECS ebmgn7 / ebmgn8 GPU bare metal instances

C.ECS sn1ne compute-optimized instances

D.ECS hfg7 high-frequency instances

Explanation: The ebmgn7 and ebmgn8 GPU bare metal families combine NVIDIA A100/H800-class GPUs with NVLink between cards and eRDMA-enabled VPC networking. This is the family Alibaba Cloud positions for distributed deep-learning training where both intra-node GPU bandwidth and inter-node RDMA performance matter.

3A workload runs continuously and needs guaranteed compute, while a separate batch job is fault-tolerant and runs only during off-peak hours. Which purchasing strategy best controls cost without violating SLA?

A.Run both workloads on Pay-As-You-Go ECS

B.Run both workloads on Spot Instances with 1-hour protection

C.Run the steady workload on a Subscription/Savings Plan and the batch job on Spot Instances

D.Run both workloads on Reserved Instances

Explanation: Subscription (or Savings Plans / Reserved Instances) provides the deepest discount for predictable steady workloads. Spot Instances are the cheapest option but can be reclaimed, so they fit fault-tolerant batch work. Mixing the two is the recommended cost pattern in Alibaba Cloud's purchasing guidance.

4A VPC has two custom route table entries with overlapping CIDRs: 10.0.0.0/16 pointing to a NAT Gateway and 10.0.1.0/24 pointing to an ECS instance acting as a firewall. Which route does VPC use for traffic destined to 10.0.1.50?

A.The 10.0.0.0/16 route to the NAT Gateway

B.The 10.0.1.0/24 route to the ECS instance

C.Traffic is dropped because the routes conflict

D.VPC randomly selects between the two routes

Explanation: Alibaba Cloud VPC uses longest-prefix match (most-specific route wins). 10.0.1.0/24 is more specific than 10.0.0.0/16, so traffic to 10.0.1.50 is forwarded to the ECS firewall instance. This is consistent with standard IP routing behavior.

5An enterprise wants its on-premises data center to communicate with Alibaba Cloud VPC over a private, dedicated, low-latency circuit. Which Alibaba Cloud component terminates the customer's leased line and connects it into the VPC routing layer?

A.Cloud Enterprise Network (CEN)

B.Smart Access Gateway (SAG)

C.Virtual Border Router (VBR) on Express Connect

D.VPN Gateway

Explanation: Express Connect uses a Virtual Border Router (VBR) to terminate the physical leased line at an Alibaba Cloud access point. The VBR exchanges routes with the customer's CPE (typically using BGP) and connects to one or more VPCs via CEN or VBR-to-VPC peering.

6A multinational customer has VPCs in five regions and needs full-mesh cross-region communication with controlled bandwidth between region pairs. What is the recommended Alibaba Cloud design?

A.VPC peering connections between every pair of VPCs

B.Attach each VPC to a Cloud Enterprise Network (CEN) instance and purchase bandwidth packages between regions

C.Use Express Connect circuits between every region

D.Route all cross-region traffic through a central VPN Gateway

Explanation: CEN attachments provide automatic full-mesh routing between attached VPCs, VBRs, and on-premises sites. Inter-region traffic on CEN requires bandwidth packages, which let architects size and budget bandwidth per region pair. This is the standard pattern for multi-region enterprise networks.

7Within a Cloud Enterprise Network instance, the customer needs centralized routing control, custom route policies, and the ability to attach hundreds of VPCs without managing manual peering. Which CEN component should the architect deploy?

A.Transit Router (TR)

B.Cloud Connect Network (CCN)

C.Smart Access Gateway

D.VPC peering gateway

Explanation: The CEN Transit Router is a regional routing hub that centralizes attachments (VPC, VBR, IPsec, peering) and supports route tables, route policies, and propagation rules. It scales beyond legacy CEN basic mode and is the recommended way to build hub-and-spoke or segmented network architectures.

8A NAT Gateway is configured with both DNAT and SNAT entries. ECS instances in the VPC must initiate outbound internet connections, while a public service must reach a specific backend port on a private ECS. Which mapping types are needed?

A.SNAT for outbound from ECS, DNAT for inbound to the private ECS

B.DNAT for outbound from ECS, SNAT for inbound to the private ECS

C.Only SNAT is required for both flows

D.Only DNAT is required for both flows

Explanation: SNAT (source NAT) translates the private source address of outbound flows to the EIP attached to the NAT Gateway, allowing ECS instances without EIPs to reach the internet. DNAT (destination NAT) maps an EIP/port to a private IP/port, allowing inbound traffic to reach a private ECS.

9An operations team needs detailed records of every accepted and rejected packet flow inside a VPC subnet, including 5-tuple information, for security forensics. Which feature should they enable?

A.VPC Flow Log

B.ActionTrail

C.CloudMonitor host metrics

D.Resource Access Management audit log

Explanation: VPC Flow Log captures network traffic metadata (source/destination IP, ports, protocol, action ACCEPT/REJECT, bytes, packets) for ENIs, vSwitches, or whole VPCs. The logs are stored in Log Service (SLS) and used for security forensics and traffic analysis.

10An Application Load Balancer (ALB) listener must route /api requests to backend group A, /static requests to backend group B, and route requests with header X-Beta=true to group C. What ALB feature implements this?

A.Listener forwarding rules with path and header conditions

B.Multiple separate ALB instances, one per route

C.Sticky session policies

D.TLS SNI configuration

Explanation: ALB listener forwarding rules support match conditions on path, host, header, cookie, query, method, and source IP, with weighted target groups as actions. A single listener can host many rules, eliminating the need for multiple ALB instances.

About the Alibaba ACP Cloud Computing Exam

The Alibaba Cloud Certified Professional - Cloud Computing (ACP-Cloud1) certifies architects and engineers on the design, deployment, and operation of production workloads on Alibaba Cloud. The exam covers ECS (including bare metal and GPU families), VPC networking with CEN/Express Connect/Transit Router, OSS, ApsaraDB (RDS, PolarDB, PolarDB-X, Tair), ALB/NLB load balancing, RAM and KMS security, monitoring with CloudMonitor/ARMS/SLS, container services (ACK), serverless (Function Compute, EventBridge), and high-availability and disaster-recovery patterns.

Questions

70 scored questions

Time Limit

110 minutes

Passing Score

80/100

Exam Fee

$300 (Alibaba Cloud)

Alibaba ACP Cloud Computing Exam Content Outline

20%

ECS Compute & Storage

Instance family selection, Bare Metal ECS (ebmg/ebmgn), GPU instances (ebmgn7/ebmgn8), Dedicated Host (DDH), Tair, ESSD PL3/AutoPL, Spot + Subscription mix, Auto Scaling lifecycle hooks, multi-AZ scaling

20%

VPC, Hybrid & Edge Networking

VPC route tables, NAT Gateway DNAT/SNAT, IPv6 Gateway, Express Connect Virtual Border Router (VBR), Cloud Enterprise Network (CEN) with bandwidth packages, Transit Router, PrivateLink, Smart Access Gateway (SAG), Flow Log, NetTrace, NPM

15%

Load Balancing, Containers & Serverless

ALB listener forwarding rules (path/header/weighted), gRPC, mTLS; NLB UDP/QUIC; CLB; ACK Pro / ASK / ACK One / virtual nodes / CSI; Function Compute provisioned concurrency; EventBridge; ApsaraMQ for RocketMQ

15%

Storage, Databases & Data Lake

OSS multipart upload, lifecycle, CRR, bucket inventory, S3-compatible API, internal endpoint; RDS HA + read/write splitting + DAS Performance Insights + Disk Auto-Scaling; PolarDB compute/storage decoupling; PolarDB-X distributed MySQL; Tair; DTS online migration; DataWorks, MaxCompute, Hologres, EMR, DLF

20%

Security, Identity & Compliance

RAM policy conditions (acs:SourceIp, tags, MFA), Service-Linked Roles, instance RAM roles + STS, Resource Directory + Control Policies, KMS Multi-Region keys / BYOK / Managed HSM, Secrets Manager, Cloud Firewall (Internet/Internal/Host), WAF + CDN, Anti-DDoS Premium, SSL Certificate Service, ActionTrail, Cloud Config

10%

Monitoring, DevOps, HA & DR

CloudMonitor host groups, ARMS APM/Tracing/RUM, SLS Logtail + SQL + Alert Center + data transformation; ROS templates with DependsOn, Terraform alicloud provider, CodeUp, Yunxiao CI/CD, OOS; multi-AZ + multi-region active-active, GTM DNS routing, HBR / Cloud Backup, DTS cross-region DR, RPO/RTO design, Cost Center anomaly detection, Savings Plans / RIs

How to Pass the Alibaba ACP Cloud Computing Exam

What You Need to Know

Passing score: 80/100
Exam length: 70 questions
Time limit: 110 minutes
Exam fee: $300

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

Alibaba ACP Cloud Computing Study Tips from Top Performers

1Memorize the ECS family ladder: t6 burstable < g7 general < c7 compute < r7 memory < gn7 GPU < ebmg/ebmgn bare metal < ebmgn7/ebmgn8 GPU bare metal with eRDMA

2Lock in the network hierarchy: VPC + vSwitch (intra-region), VPC peering (intra-region only), Transit Router on CEN (cross-region with bandwidth packages), VBR on Express Connect (on-prem), SAG (branches), VPN Gateway (internet IPsec)

3Drill load-balancer choice: ALB for L7 (rules, gRPC, mTLS, weighted target groups), NLB for L4 UDP/TCP/QUIC with full-cone NAT, CLB legacy

4Compare PolarDB vs PolarDB-X: PolarDB shares storage and scales reads via replicas (one writer, up to 100 TB); PolarDB-X shards across CN/DN nodes for hundreds of TB and high write throughput

5Know the security stack end-to-end: RAM (identity), KMS Multi-Region + BYOK + Managed HSM (keys), Secrets Manager (rotated secrets), Cloud Firewall (Internet/Internal/Host + IPS), WAF (L7), Anti-DDoS Premium (volumetric), Resource Directory + Control Policies (multi-account guardrails)

6Practice DR/cost trade-offs: DTS for online cross-region replication (RPO < 1 min), HBR for vault backup, GTM for DNS-based failover, Savings Plans for flexible commit, Spot for fault-tolerant batch

Frequently Asked Questions

What is the Alibaba ACP Cloud Computing (ACP-Cloud1) exam?

ACP Cloud Computing is the professional-level Alibaba Cloud certification for architects and engineers who design, deploy, and operate production workloads on Alibaba Cloud. It tests deeper architecture choices than the associate-level ACA exams - across compute (ECS, bare metal, GPU), networking (VPC, CEN, Express Connect), databases (RDS, PolarDB, PolarDB-X), security (RAM, KMS, Cloud Firewall), and DR design.

How many questions and how much time does the ACP-Cloud1 exam have?

The ACP-Cloud1 exam has 70 questions to be completed in 110 minutes. The passing score is 80 out of 100. Question types include single-answer, multiple-answer, and true/false. The exam is delivered through Alibaba Cloud's online proctoring system, and the certificate is valid for 2 years.

How much does the ACP Cloud Computing exam cost?

The standard registration fee is US$300, paid through the Alibaba Cloud Academy / certification portal. Alibaba Cloud occasionally runs regional discounts and bundle pricing through partners. Retakes are charged at the standard fee. Recertification (after 2 years) requires retaking the current ACP-Cloud1 version or earning a higher-level certification.

What topics does ACP-Cloud1 cover?

Topics include ECS (instance families, Bare Metal, GPU, Dedicated Host, ESSD), VPC (route tables, NAT, IPv6 Gateway, CEN with Transit Router, Express Connect VBR, PrivateLink, SAG), ALB/NLB/CLB load balancing, OSS (multipart, lifecycle, CRR, inventory, S3-compatible), ApsaraDB (RDS, PolarDB, PolarDB-X, Tair, DTS, DAS), security (RAM, KMS, Secrets Manager, Cloud Firewall, WAF, Anti-DDoS), monitoring (CloudMonitor, ARMS, SLS), containers (ACK Pro, ASK, ACK One), serverless (Function Compute, EventBridge), DevOps (ROS, Terraform), and HA/DR (multi-region, GTM, HBR, DTS DR).

How long should I study for ACP Cloud Computing?

Most candidates study 80-120 hours over 8-12 weeks. If you already hold an AWS or Azure architect certification, the gap is mainly Alibaba Cloud-specific service names (ApsaraDB families, Cloud Enterprise Network, Cloud Firewall, ARMS) and design patterns. Build hands-on labs in a free-tier account: VPC + CEN + Transit Router, ALB with weighted target groups, PolarDB read replicas, Function Compute + EventBridge, and ACK with virtual nodes. Practice 200+ scenario questions before scheduling.

How does ACP-Cloud1 compare to AWS SAA-C03 or Azure AZ-305?

ACP-Cloud1 sits between AWS Solutions Architect Associate (SAA-C03) and Azure Solutions Architect Expert (AZ-305) in scope. It has a 2-year validity (vs AWS 3-year, AZ-305 1-year for the role-based credential), costs US$300 (vs SAA $150 or AZ-305 $165), and is mandatory if you operate Alibaba Cloud in production. The depth on networking (CEN, Transit Router, VBR) and on Apsara-specific services like PolarDB-X and Tair is unique to Alibaba Cloud.

Where can I take the ACP Cloud Computing exam?

ACP-Cloud1 is delivered through Alibaba Cloud's own online proctoring system. You register through the Alibaba Cloud Academy, schedule a slot, and take the exam from a quiet room with a webcam and government-issued ID. The exam is available globally in English and Chinese. Bring two forms of valid ID and a clean workspace; the proctor will verify your environment before the exam starts.