Latest [Sep 01, 2021] Alibaba ACP-Sec1 Exam Practice Test To Gain Brilliante Result
Take a Leap Forward in Your Career by Earning Alibaba ACP-Sec1
NEW QUESTION 18
In which of the following scenarios is Alibaba Cloud Security Center applicable? (Number of correct answers
3)
- A. Creating an ECS with generic software
- B. Setting up web server to provide web service to public
- C. Penetration testing
- D. Network security protection for ad campaigns or other activities
- E. Batch server security O&M
Answer: C,D,E
NEW QUESTION 19
Alibaba Cloud Security Center can record source IP addresses that remotely access a server, and shield suspicious IP addresses that frequently connect to the server. During routine O&M. which of the following functions can be used to set the IP address that are commonly used by the system administrator'?
- A. Valid Login IP list
- B. Webshell detection
- C. Security group
- D. Frequent logon location management
Answer: D
NEW QUESTION 20
You are importing your own key material in to Key Management Service (KMS). Which of the following is the correct sequence of steps to follow?
- A. 1 Create an external key
2 Get the "import key material" parameters
3 Import the key material - B. 1 Get the "import key material" parameter
2 Create an external key
3. Import the key material - C. 1 Import the key material
2 Get the "import key material" parameters
3 Create an external key - D. 1 Create an external key
2 Import the key material
3 Get the "import key material" parameters
Answer: A
NEW QUESTION 21
Which of the following permissions is required to manually install the Alibaba Cloud Security center agent on the server?
- A. System administrator privilege
- B. Common user permission
- C. FTP service permission
- D. Database permission
Answer: A
NEW QUESTION 22
You applied for an SSL certificate through Alibaba Cloud's SSL Certificates Service During the application, you selected "Manual" at the "CSR "" step. You now want to install your certificate on a server running Apache What must you do?
- A. SSL Certificates Service doesn't support the type of certificates needed by Apache. They cannot be used together
- B. You must revoke your certificate and re-apply, this time choosing "Automatic" at the "CSR Generation" step. Otherwise, the SSL certificate cannot be downloaded
- C. You can use the "generate pfx file" function built into the SSL Certificates Service to manually generate and download the pfx file needed by Apache
- D. You can download a crt file of type "Other" from the SSL Certificates Service console, then use openssl to convert this file to pfx format for use with Apache
Answer: C
NEW QUESTION 23
A customer built his website on Alibaba Cloud- To defend against Web attacks he activated Alibaba Cloud WAF However, a week later, the customer finds that his website has suffered intrusion. Which of the following actions should he take to ensure that WAF functions correctly and enhance system security?
(Number of correct answers: 4)
- A. Configure a security group for the ECS instance.
- B. Check whether or not the DNS resolution results point to the WAF address
- C. Resolve the website domain name to the site s source IP address
- D. Secure other HTTP services on the ECS instance using WAF
- E. Use Security Center to remove Trojans and fix vulnerabilities
- F. Delete all snapshots and clear the server
Answer: A,B,D,E
NEW QUESTION 24
Which of the following configurations is NOT a feature provided by Alibaba Cloud Web Application Firewall product?
- A. Data Leakage Prevention
- B. Crawler Detection
- C. Blocked Regions
- D. HTTP ACL Policy
Answer: C
NEW QUESTION 25
Data Risk Control feature has been integrated into Alibaba Cloud WAF. When this function is activated, a script must be embedded into the page that wishes to be protected under the corresponding domain name to check whether a client is trustworthy. Which type of script is it?
- A. Java
- B. C++
- C. Vbscript
- D. JavaScript
Answer: D
NEW QUESTION 26
Alibaba Cloud WAF cannot protect against large traffic DDoS attacks which can be solved by Alibaba Cloud Ant-DDoS Service.
- A. True
- B. False
Answer: A
NEW QUESTION 27
Which of the following methods can be used to download the metric data of Alibaba Cloud CloudMonitor?
- A. You can only view the reports, but cannot download them.
- B. Download the data through Open APIs
- C. You can download the data through both the console and Open APIs
- D. Download the data from the console
Answer: C
NEW QUESTION 28
After a customer uses Alibaba Cloud Anti-DDoS Premium Service, a 502 error is prompted. Which of the followings are the possible causes of the error? (Number of correct answers 3)
- A. The IP address of the origin site is exposed and suffered an attack
- B. The Anti-DDoS Service IP range was not released As a result, the origin site is blocked.
- C. Network congestion or jitter occurred
- D. The service was configured using the IP address method instead of the CI
Answer: A,B,C
NEW QUESTION 29
The protection rules of Alibaba Cloud WAF are updated in real time after a user makes changes in WAF configuration page.
- A. True
- B. False
Answer: A
NEW QUESTION 30
Various profit-oriented hacker groups exist on the Internet. They control a large number of server resources and can launch network attacks against a target server at any time Among those, one type of attack is common and destructive, which completely consumes resources of the target server so that normal customers cannot connect to the server Which of the following belongs to this type of attack?
- A. XSS attack
- B. SQL injection
- C. Webshell attack
- D. DDoS attack
Answer: D
NEW QUESTION 31
Alibaba Cloud WAF identifies attacks using human/robot detection, Big Data analysis, model analysis, and other related techniques. Which of the following CC attack defense modes does WAF provide to meet the protection requirements of users? (Number of correct answers 2)
- A. Threat
- B. Exception
- C. Normal
- D. Attack emergency
Answer: C,D
NEW QUESTION 32
Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?
- A. You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes
- B. Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.
- C. Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks
- D. Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time
Answer: B
NEW QUESTION 33
Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications Which of the following functions are currently provided by CloudMonitor? (Number of correct answers: 4)
- A. Custom monitoring
- B. Site monitoring
- C. Alerting
- D. Custom firewall
- E. Cloud service monitoring
Answer: A,B,C,E
NEW QUESTION 34
Alibaba Cloud's Content Moderation service cannot detect advertising or spam content.
- A. False
- B. True
Answer: A
NEW QUESTION 35
Your applications are deployed on Alibaba Cloud ECS instances. You want to collect indicators by yourself for application layer monitoring. Which of the following functions provided by Alibaba Cloud CloudMonitor can be used for indicator collection, aggregation, and alerting?
- A. Custom monitoring
- B. Cloud service monitoring
- C. CloudMonitor cannot meet these requirements
- D. Site monitoring
Answer: A
NEW QUESTION 36
If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?
- A. The administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports
- B. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks
- C. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks
- D. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks
Answer: C
NEW QUESTION 37
If you activate Alibaba Cloud Security Center on an ECS Linux instance and change the default SSH port (22) to another port, you will no longer receive SMS or email notification related to brute force password cracking
- A. False
- B. True
Answer: A
NEW QUESTION 38
When a Layer-4 forwarding rule is configured with multiple origin site IP addresses, Alibaba Cloud Anti-ODoS Premium Service will perform load balancing for Layer-4 requests using balancing algorithm
- A. True
- B. False
Answer: A
NEW QUESTION 39
Content Moderation service is useful m a wide variety of scenarios. Which of the following are the *most* suited to Content Moderation's capabilities? (Number of correct answers 2)
- A. Detecting spam posts on a forum
- B. Detecting faces in images
- C. Deleting porn on a social networking site
- D. Detecting sensitive customer information such as credit card numbers in uploaded images
Answer: A,C
NEW QUESTION 40
Alibaba Cloud Anti-DDoS Premium can be used only when the origin site IP address is in Alibaba Cloud.
- A. False
- B. True
Answer: A
NEW QUESTION 41
Content Moderation Service is an API-based service Like many API services, it employs throttling to make sure that the service cannot be overwhelmed by a large number of simultaneous requests. What is the maximum number of requests per minute you can make against the Content Moderation API?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 42
......
Authentic Best resources for ACP-Sec1 Online Practice Exam: https://www.dumpsmaterials.com/ACP-Sec1-real-torrent.html
