Try Free ACP-Sec1 Exam Questions For ACP Cloud Security Certification

test2022-03-18T08:22:08+00:00

Worried about your Alibaba ACP-Sec1 exam? ACP Cloud Security Certification is a professional technical certification oriented to architects, developers, and O&M personnel that use Alibaba Cloud security products. Customers may get the most up-to-date ACP-Sec1 exam questions and the most accurate study materials from us. You can now utilize this free practice test to gauge your readiness. You will get a comprehensive ACP-Sec1 study guide that will ensure your success on the first attempt!

To help you prepare for the exam, take a free ACP-Sec1 practice test.

Page 1 of 3

1. Alibaba Cloud Security Center provides patch management service, where are the patches published from?

Contributed by netizens from open-source communities

Officially published by operating system vendors

Officially published by application vendors

Developed by Alibaba Cloud

2. Alibaba Cloud ECS instances are common targets of hacker attacks. There are many types of attacks against ECS instances.

Which of the following attacks specifically target the operating system of an ECS instance? (Number of correct answers: 3)

SQL injection

Trojan or Webshell installation

Brute force RDP password cracking

Brute force SSH password cracking

3. You have bought an ECS instance on Alibaba Cloud After deploying a Python environment on it, which of the following is the easiest and quickest way to monitor whether the Python process is running normally and report an alert if the process is accidentally terminated?

Use site monitoring

Log on to the ECS instance console

Utilize process monitoring feature (can be found in ECS instance

Write a script for monitoring by yourself.

4. User A is the system administrator of a company, who often takes business trips to Shanghai Each time when he remotely logs on to the Shanghai an alert is reported, prompting "Someone is remotely logging on to the server Please pay attention to your server security"

Which of the following methods can be used to quickly and automatically resolve this issue?

Open a ticket immediately to consult Alibaba Cloud engineers

Log on to the Alibaba Cloud Security Center, and add a frequent logon location to the configuration item of Security Center.

Ask the company leaders for help

Call a friend, who is a famous hacker in the industry, for help.

5. Which of the following services can be protected by the Alibaba Cloud Security Center's anti-brute force password cracking function? (Number of answers 3)

Windows remote desktop service (RDP) Linux remote control service (SSH)

Web service (HTTP)

MySQL database service SQL Server database service

File transfer service (FTP)

6. If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21

If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?

After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks

After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks

The administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports

After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks

7. Content Moderation service is useful m a wide variety of scenarios.

Which of the following are the *most* suited to Content Moderation's capabilities? (Number of correct answers 2)

Deleting porn on a social networking site

Detecting spam posts on a forum

Detecting faces in images

Detecting sensitive customer information such as credit card numbers in uploaded images

8. In which of the following scenarios is Alibaba Cloud Security Center applicable? (Number of correct answers 3)

Setting up web server to provide web service to public

Penetration testing

Creating an ECS with generic software

Batch server security O&M

Network security protection for ad campaigns or other activities

9. When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.

True

False

10. Which of the following attacks can Alibaba Cloud Anti-DDoS Basic defend against? (Number of coned answers 4)

ACK Flood

UDP Flood

CMP Flood

Brute force password cracking

SYN Flood

Page 2 of 3

11. Anti-DDoS Premium Service is a value-added service intended to address the problem of service interruption caused by DDoS attack to servers including non-Alibaba Cloud hosts)

Users can configure a protected IP address so that the attack traffic can be redirected to this IP address, thereby ensuring the stability and reliability of the origin site. When a user configures Anti-DDoS Premium Service and imports an HTTPS certificate, the system prompts an "incorrect parameter format" error Which of the following is NOT the reason of this error?

The certificate contains strings like "-―"

The name of the certificate contains invalid letters

The certificate contains nonstandard content

The name of the certificate is too long to be accepted

12. More and more blackmail attacks (using hacking tools or ransomware) have been detected among recent network security events, causing ever greater damage and financial loss.

Which of the following measures can help Alibaba Cloud customers reduce risks in blackmail attacks? (Number of correct answers 3)

Enable images and snapshots for ECS instances, back up data every day, and keep more than three redundant copies

Deploy different service applications on servers with the same security level and security domain, and ensure unified policy management and defense

Use strong passwords with more than 15 characters for the accounts of all types of cloud services

When remotely operating and maintaining an ECS instance use the superuser account for login at all times

If remote O&M is required use IpsecVPN or SSL VPN remote solutions

13. For which of the following protection scenarios is Alibaba Cloud WAF applicable? (Number of correct answers: 5)

Data leakage prevention

Defense against website trojans and tampering

Virtual vulnerability patches

Protection against malicious CC attacks

Brute force cracking protection

Protection against SMS refresh and service data crawling

14. After you activate the button Data Risk Control feature in Alibaba Cloud WAF.

Which of the following risk control verification modes m displayed if you directly request for a risk control protection URL?

Slider verification

QR code verification

Image verification

Digit verification

15. Data Risk Control feature has been integrated into Alibaba Cloud WAF. When this function is activated, a script must be embedded into the page that wishes to be protected under the corresponding domain name to check whether a client is trustworthy.

Which type of script is it?

JavaScript

C++

Vbscript

Java

16. Alibaba Cloud WAF currently supports web security protection for HTTP and HTTPS.

Which of the following ports are usually used for HTTP and HTTPS protocols? (Number of correct answers: 2)

443

17. Alibaba Cloud Security Center can record source IP addresses that remotely access a server, and shield suspicious IP addresses that frequently connect to the server. During routine O&M.

Which of the following functions can be used to set the IP address that are commonly used by the system administrator'?

Security group

Valid Login IP list

Frequent logon location management

Webshell detection

18. In a public cloud environment Alibaba Cloud is responsible for security of cloud computing infrastructure (such as the IDC environment, physical server O&M, and virtualization layer of cloud products). However, you still need to perform necessary security optimization measures for the Cloud products you purchased.

Which of the following actions do you think are safe?

To reduce the communication cost, five administrators of the company use the root account to log on to the ECS instance.

After buying an ECS instance, enable the security group firewall for the ECS instance through the console, and only allow a management IP address to remotely log on to the ECS instance.

For easy management, change the administrator password for the ECS instance to 123456.

To enable colleagues working at home to update data, open public IP addresses for Apsara DB for RDS instances, and allow all IP addresses to connect to the instances

19. When submitting requests to the Content Moderation service API, which HTTP method should you use?

HEAD

PUT

GET

POST

20. 1.Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications

Which of the following functions are currently provided by CloudMonitor? (Number of correct answers: 4)

Custom firewall

Alerting

Site monitoring

Cloud service monitoring

Custom monitoring

Page 3 of 3

21. Users can detach the Security Center client on Alibaba Cloud ECS instances, and reinstall it later when necessary.

True

False

22. Among various types of network attacks, "phishing" is one of the most common attacks. A phishing website looks exactly the same as the real website It asks visitors to login with their accounts and passwords; at the same time, record these privacy information for illegal purpose.

Which of the following statements about how phishing websites are spread is FALSE?

Banks publish phishing website links in prominent positions on their official websites

Phishing website links are sent through Facebook. Twitter and other IM(instant Messenger) applications.

Advertisements are pushed to search engines and small and medium websites, attracting users to click the phishing website links.

Phishing website links are published in batches through emails forums, blogs, and SNS(Social Network Sites).

23. Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks.

Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?

Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time

Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks

Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.

You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes