[Sep-2021] Dumps Brief Outline Of The ACP-Sec1 Exam - SureTorrent
ACP-Sec1 Training & Certification Get Latest Alibaba Security
NEW QUESTION 34
baba Cloud security service provides in-depth defense Which of the following services is dedicated for host security?
- A. WAF
- B. Security Center
- C. Data Risk Control
- D. Anti-DDoS pro Service
Answer: D
NEW QUESTION 35
In a public cloud environment Alibaba Cloud is responsible for security of cloud computing infrastructure (such as the IDC environment, physical server O&M, and virtualization layer of cloud products). However, you still need to perform necessary security optimization measures for the Cloud products you purchased Which of the following actions do you think are safe?
- A. To reduce the communication cost, five administrators of the company use the root account to log on to the ECS instance.
- B. To enable colleagues working at home to update data, open public IP addresses for ApsaraDB for RDS instances, and allow all IP addresses to connect to the instances
- C. After buying an ECS instance, enable the security group firewall for the ECS instance through the console, and only allow a management IP address to remotely log on to the ECS instance.
- D. For easy management, change the administrator password for the ECS instance to 123456.
Answer: C
NEW QUESTION 36
After you install the Alibaba Cloud Security center agent on a non with your Alibaba Cloud account*?
- A. The installation verification key generated on the console
- B. Your account ID
- C. The user name and password
- D. Your AccessKey
Answer: D
NEW QUESTION 37
When you receive a security alert from Alibaba Cloud Security Center, which of the following actions should you do?
- A. Shield the alert because it is not important
- B. Once you receive an alert, you need to determine the specific risk and perform troubleshooting For example, change the password, or upgrade application software
- C. The alert is dangerous You must immediately report it to the police
- D. There is no need to care about the alert Alibaba Cloud Security Center will handle it.
Answer: B
NEW QUESTION 38
A customer built his website on Alibaba Cloud- To defend against Web attacks he activated Alibaba Cloud WAF However, a week later, the customer finds that his website has suffered intrusion. Which of the following actions should he take to ensure that WAF functions correctly and enhance system security?
(Number of correct answers: 4)
- A. Configure a security group for the ECS instance.
- B. Check whether or not the DNS resolution results point to the WAF address
- C. Resolve the website domain name to the site s source IP address
- D. Secure other HTTP services on the ECS instance using WAF
- E. Use Security Center to remove Trojans and fix vulnerabilities
- F. Delete all snapshots and clear the server
Answer: A,B,D,E
NEW QUESTION 39
When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.
- A. True
- B. False
Answer: A
NEW QUESTION 40
Alibaba Cloud's Content Moderation service cannot detect advertising or spam content.
- A. False
- B. True
Answer: A
NEW QUESTION 41
Border Gateway Protocol (BGP) is mainly used for interconnection between autonomous systems (AS) on the Internet It. Controlling route transmission and selecting the best route Alibaba Cloud uses a BGP multi-line access mechanism for all its IDCs in China. Which of the followings are advantages of a BGP multi-line IDC?
(Number of correct answers 2)
- A. Low bandwidth cost
- B. Larger bandwidth
- C. Elimination of access barriers between North China and South China because China is big and North China and South China has different telecom operators
- D. High-speed interconnection
Answer: C,D
NEW QUESTION 42
Alibaba Cloud Anti-DDoS Premium Service can be used to protect against DDoS attacks larger than 100 Gbps. It can be used to protect both Alibaba Cloud hosts and non-Alibaba Cloud hosts
- A. True
- B. False
Answer: A
NEW QUESTION 43
When applying for an SSL certificate through Alibaba Cloud's SSL Certificates Service, there is an offline review process which can take 3-5 business days or 5-7 business days depending on the type of certificate you have applied for:
- A. True
- B. False
Answer: A
NEW QUESTION 44
Data Risk Control feature has been integrated into Alibaba Cloud WAF. When this function is activated, a script must be embedded into the page that wishes to be protected under the corresponding domain name to check whether a client is trustworthy. Which type of script is it?
- A. Java
- B. C++
- C. Vbscript
- D. JavaScript
Answer: D
NEW QUESTION 45
Which of the following attacks can Alibaba Cloud Anti-DDoS Basic defend against? (Number of coned answers 4)
- A. CMP Flood
- B. SYN Flood
- C. UDP Flood
- D. ACK Flood
- E. Brute force password cracking
Answer: B,C,D,E
NEW QUESTION 46
When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?
- A. This alert does not matter and can be ignored.
- B. Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert.
- C. Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance
- D. Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures
Answer: C
NEW QUESTION 47
There is a limit on the number of Customer Master Keys (CMKs) that users can create using Key Management Service (KMS), but users can raise this limit by submitting a support ticket to Alibaba Cloud.
- A. True
- B. False
Answer: A
NEW QUESTION 48
Alibaba Cloud Anti-DDoS Premium can be used only when the origin site IP address is in Alibaba Cloud.
- A. False
- B. True
Answer: A
NEW QUESTION 49
......
Certification Training for ACP-Sec1 Exam Dumps Test Engine: https://www.suretorrent.com/ACP-Sec1-exam-guide-torrent.html