最新的Alibaba ACP-Sec1免費考試真題

問題1

The protection rules of Alibaba Cloud WAF are updated in real time after a user makes changes in WAF configuration page.

A. False

B. True

正確答案: B

問題2

Anti-DDoS Premium Service is a value-added service intended to address the problem of service interruption caused by DDoS attack to servers including non-Alibaba Cloud hosts) Users can configure a protected IP address so that the attack traffic can be redirected to this IP address, thereby ensuring the stability and reliability of the origin site. When a user configures Anti-DDoS Premium Service and imports an HTTPS certificate, the system prompts an "incorrect parameter format" error Which of the following is NOT the reason of this error?

A. The name of the certificate contains invalid letters

B. The name of the certificate is too long to be accepted

C. The certificate contains nonstandard content

D. The certificate contains strings like "--"

正確答案: C

問題3

Cloud computing service security requires the joint effort of the cloud service supplier (such as Alibaba Cloud), independent software vendor (ISV), and users The failure of any party to fulfill their responsibilities may lead to security risks. Which of the following are the responsibilities of the cloud computing service users? (Number of correct answers 2)

A. Regularly change the service system password

B. Ensure multi-channel power supply in the Cloud data center

C. Provide security protection for physical infrastructure

D. Strengthen information security management in the company to prevent sensitive information leakage

正確答案: A,D

問題4

Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?

A. Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time

B. You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes

C. Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks

D. Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.

正確答案: D

問題5

A website is built using open-source software To prevent hacker attacks and fix vulnerabilities in a timely manner, the administrator of the website wants to use the patch management feature in Security Center. Which of the following statements about patch management is FALSE.

A. Rollback of Web vulnerabilities means to restore the original files, while rollback of Windows vulnerabilities means to uninstall the patch upgrade

B. Before patches for most common Web vulnerabilities are released, the Alibaba Cloud Security O&M team will have fixed the vulnerabilities using self-developed patches

C. Vulnerabilities are automatically fixed Once a self-developed paten is released, it automatically fixes vulnerabilities for all customers who have enabled patch management.

D. Patch management can operate machines in batches in the cloud. For large-scale vulnerabilities, it supports one-key patch upgrade, which is easy and convenient

正確答案: C

問題6

You applied for an SSL certificate through Alibaba Cloud's SSL Certificates Service During the application, you selected "Manual" at the "CSR "" step. You now want to install your certificate on a server running Apache What must you do?

A. You can use the "generate pfx file" function built into the SSL Certificates Service to manually generate and download the pfx file needed by Apache

B. You must revoke your certificate and re-apply, this time choosing "Automatic" at the "CSR Generation" step. Otherwise, the SSL certificate cannot be downloaded

C. SSL Certificates Service doesn't support the type of certificates needed by Apache. They cannot be used together

D. You can download a crt file of type "Other" from the SSL Certificates Service console, then use openssl to convert this file to pfx format for use with Apache

正確答案: A

問題7

Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications Which of the following functions are currently provided by CloudMonitor? (Number of correct answers: 4)

A. Cloud service monitoring

B. Custom firewall

C. Alerting

D. Site monitoring

E. Custom monitoring

正確答案: A,C,D,E

問題8

Alibaba Cloud WAF identifies attacks using human/robot detection, Big Data analysis, model analysis, and other related techniques. Which of the following CC attack defense modes does WAF provide to meet the protection requirements of users? (Number of correct answers 2)

A. Threat

B. Exception

C. Normal

D. Attack emergency

正確答案: C,D

問題9

In which of the following scenarios is Alibaba Cloud Security Center applicable? (Number of correct answers
3)

A. Network security protection for ad campaigns or other activities

B. Creating an ECS with generic software

C. Batch server security O&M

D. Setting up web server to provide web service to public

E. Penetration testing

正確答案: A,C,E

最新的Alibaba ACP Cloud Security Professional - ACP-Sec1免費考試真題

聯系我們

站內鏈接

最新更新