ACP Cloud Security Professional ACP-Sec1 Free Dumps

dumps2021-10-14T03:32:30+08:00

ACP Cloud Security Professional ACP-Sec1 exam dumps are the latest. Alibaba Cloud ACP-Sec1 exam dumps can help you test all the related topics: SAP Mobile Platform Management Cockpit, Security Administration. Free Alibaba Cloud ACP Cloud Security Professional ACP-Sec1 exam dumps are available below.

Page 1 of 2

1. Products like ECS and Server Load Balancer it will be automatically protected by Anti-DDoS Basic service

True

False

2. Your applications are deployed on Alibaba Cloud ECS instances. You want to collect indicators by yourself for application layer monitoring.

Which of the following functions provided by Alibaba Cloud CloudMonitor can be used for indicator collection, aggregation, and alerting?

CloudMonitor cannot meet these requirements

Cloud service monitoring

Site monitoring

Custom monitoring

3. If you install Alibaba Cloud Security Center client on a non-Alibaba Cloud server, which of the following statements allows you to check the server-related reports on the Security Center?

Associate the Security Center client with your Alibaba Cloud official website account.

Security Center does not support non-Alibaba Cloud servers

You need to manually install the agent on the external server, and use a verification key to associate it with your account

You cannot check the reports on the Alibaba Cloud console.

4. As your business grows, you begin exceeding the maximum number of requests-per-minute supported by the Content Moderation API and requests begin to fail What is the best way to resolve this issue?

Build a custom message queue solution which you can use to buffer requests and spread them out over time

Open a ticket and ask for the API request limits to be raised

There is nothing you can do to reoslve this problem, except to make fewer requests.

Open a second Alibaba Cloud account, buy Content Moderation service under that account, and split your quests between these two accounts.

5. Anti-DDoS Premium Service is a value-added service intended to address the problem of service interruption caused by DDoS attack to servers including non-Alibaba Cloud hosts)

Users can configure a protected IP address so that the attack traffic can be redirected to this IP address, thereby ensuring the stability and reliability of the origin site. When a user configures Anti-DDoS Premium Service and imports an HTTPS certificate, the system prompts an "incorrect parameter format" error Which of the following is NOT the reason of this error?

The certificate contains strings like "-―"

The name of the certificate contains invalid letters

The certificate contains nonstandard content

The name of the certificate is too long to be accepted

6. When importing key material into Key Management Service (KMS), you will be given an import token and public encryption key valid for 24 hours. The public key KMS provides must be used to encrypt your key material before upload KMS allows you to choose different public key encryption algorithms

Which ones are supported? (Number of correct answers; 3)

RSAES_OAEP_SHA_1

RSAES_ECDHE_V1 _5

RSAES_OAEP_SHA_256

RSAES PKCS1 V1 5

7. Which of the following configurations is NOT a feature provided by Alibaba Cloud Web Application Firewall product?

Blocked Regions

HTTP ACL Policy

Data Leakage Prevention

Crawler Detection

8. Various profit-oriented hacker groups exist on the Internet. They control a large number of server resources and can launch network attacks against a target server at any time Among those, one type of attack is common and destructive, which completely consumes resources of the target server so that normal customers cannot connect to the server

Which of the following belongs to this type of attack?

XSS attack

Webshell attack

DDoS attack

SQL injection

9. Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications.

Which of the following statements about CloudMonitor is accurate'?

CloudMonitor cannot be used through the Alibaba Cloud console

CloudMonitor must be independently bought and paid for activation

CloudMonitor can monitor websites that are not deployed in Alibaba Cloud products.

To use CloudMonitor for ECS monitoring, there no agent needs to be installed in EC

10. When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors

If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?

This alert does not matter and can be ignored.

Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures

Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert.

Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance

11. Before using the HTTPS protection feature in Alibaba Cloud WAF, you must upload the server certificate and private key beforehand.

True

False

12. What are some of the products that support integration with Alibaba Cloud's SSL Certificates Service (Number of correct answers: 3)

ApsaraDB for RDS

Content Distribution Network (CDN)

Secure Content Distribution Network (SCDN)

Server Load Balancer (SLB)

13. You applied for an SSL certificate through Alibaba Cloud's SSL Certificates Service During the application, you selected "Manual" at the "CSR "" step. You now want to install your certificate on a server running Apache

What must you do?

You must revoke your certificate and re-apply, this time choosing "Automatic" at the "CSR Generation" step. Otherwise, the SSL certificate cannot be downloaded

You can download a crt file of type "Other" from the SSL Certificates Service console, then use openssl to convert this file to pfx format for use with Apache

SSL Certificates Service doesn't support the type of certificates needed by Apache. They cannot be used together

You can use the "generate pfx file" function built into the SSL Certificates Service to manually generate and download the pfx file needed by Apache

14. Alibaba Cloud Security Center is consisted of light-weight Agents and cloud engine to provide functions such as webshell scanning and removal, day vulnerability repair, security baseline inspection, and host access control, to protect the server security.

Which of the following processes is NOT included in Security Center Agent?

AliHids

AliYunDunUpdate

AliYunDun

All Safe

15. An Alibaba Cloud user buys an ECS instance and deploys Tomcat on it

Which of the following is the easiest way for the user to monitor whether port 8080 (used by Tomcat) on this ECS instance is functioning normally or not?

Log on to the ECS instance every hour to check the port using the command line.

Buy a third-party monitoring tool

Write a script for detection and report the data to CloudMonitor.

Use Alibaba Cloud CloudMonitor s site monitor feature to create a new Monitoring Task to monitor the port status.

16. To improve system security and protect the system from DDoS attacks, you can use Alibaba Cloud Anti-DDoS Premium Service.

Which of the following products can be used together with Alibaba Cloud Anti-DDoS Service to improve the system access capabilities? (Number of correct answers 3)

Server Load Balancer

CDN

WAF

RDS

17. Users can detach the Security Center client on Alibaba Cloud ECS instances, and reinstall it later when necessary.

True

False

18. When you receive a security alert from Alibaba Cloud Security Center, which of the following actions should you do?

The alert is dangerous You must immediately report it to the police

Shield the alert because it is not important

Once you receive an alert, you need to determine the specific risk and perform troubleshooting For example, change the password, or upgrade application software

There is no need to care about the alert Alibaba Cloud Security Center will handle it.

19. Data transfer between Internet devices requires specific specifications, which are called "protocols" Among those, the invention of a certain protocol played a decisive role in the creation of the Internet.

By using those protocols, tens of thousands of computers can be connected and communicate with each other What is the following protocol is not defined in OSI 7 layer model?

HTTP

TCP

UDP

SOAP

20. Alibaba Cloud ECS instances are common targets of hacker attacks. There are many types of attacks against ECS instances.

Which of the following attacks specifically target the operating system of an ECS instance? (Number of correct answers: 3)

SQL injection

Trojan or Webshell installation

Brute force RDP password cracking

Brute force SSH password cracking

Page 2 of 2

21. Which of the following attacks can Alibaba Cloud Anti-DDoS Basic defend against? (Number of coned answers 4)

ACK Flood

UDP Flood

CMP Flood

Brute force password cracking

SYN Flood

22. Alibaba Cloud WAF identifies attacks using human/robot detection, Big Data analysis, model analysis, and other related techniques.

Which of the following CC attack defense modes does WAF provide to meet the protection requirements of users? (Number of correct answers 2)

Threat

Exception

Attack emergency

Normal

23. Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications

Which of the following functions are currently provided by CloudMonitor? (Number of correct answers: 4)

Custom firewall

Alerting

Site monitoring

Cloud service monitoring

Custom monitoring

24. More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.

True

False

25. Data Risk Control feature has been integrated into Alibaba Cloud WAF. When this function is activated, a script must be embedded into the page that wishes to be protected under the corresponding domain name to check whether a client is trustworthy.

Which type of script is it?

JavaScript

C++

Vbscript

Java

26. When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.

True

False

27. The ScheduleKeyDeletion function lets you schedule a time to delete Key Management Service (KMS) keys.

How far in the future can a key deletion event be scheduled?

7 days

30 days

15 days

60 days

28. User A is the system administrator of a company, who often takes business trips to Shanghai Each time when he remotely logs on to the Shanghai an alert is reported, prompting "Someone is remotely logging on to the server Please pay attention to your server security"

Which of the following methods can be used to quickly and automatically resolve this issue?

Open a ticket immediately to consult Alibaba Cloud engineers

Log on to the Alibaba Cloud Security Center, and add a frequent logon location to the configuration item of Security Center.

Ask the company leaders for help

Call a friend, who is a famous hacker in the industry, for help.

29. There is a limit on the number of Customer Master Keys (CMKs) that users can create using Key Management Service (KMS), but users can raise this limit by submitting a support ticket to Alibaba Cloud.

True

False

30. A customer built his website on Alibaba Cloud- To defend against Web attacks he activated Alibaba Cloud WAF However, a week later, the customer finds that his website has suffered intrusion.

Which of the following actions should he take to ensure that WAF functions correctly and enhance system security? (Number of correct answers: 4)

Use Security Center to remove Trojans and fix vulnerabilities

Delete all snapshots and clear the server

Secure other HTTP services on the ECS instance using WAF

Configure a security group for the ECS instance.

Check whether or not the DNS resolution results point to the WAF address

Resolve the website domain name to the site s source IP address

31. Border Gateway Protocol (BGP) is mainly used for interconnection between autonomous systems (AS) on the Internet It. Controlling route transmission and selecting the best route Alibaba Cloud uses a BGP multi-line access mechanism for all its IDCs in China.

Which of the followings are advantages of a BGP multi-line IDC? (Number of correct answers 2)

Larger bandwidth

High-speed interconnection

Low bandwidth cost

Elimination of access barriers between North China and South China because China is big and North China and South China has different telecom operators

32. Cross Site Script (XSS) attacks refer to a kind of attack by tampering the webpage using HTML injection to insert malicious scripts so as to control the user's browser when the user browses the webpage XSS vulnerabilities may be used for user identity stealing (particularly the administrator identity), behavior hijacking, Trojan insertion and worm spreading, and also phishing

True

False

ACP Cloud Security Professional ACP-Sec1 Free Dumps

ACP Cloud Security Professional ACP-Sec1 Free Dumps

Share this post

Leave a Reply Cancel reply

Related Posts