Obtain the ACP-Sec1 PDF Dumps Get 100% Outcomes Exam Questions For You To Pass [Q31-Q54]

ACP-Sec1 Alibaba

admin -

October 3, 2022

Rate this post

Obtain the ACP-Sec1 PDF Dumps Get 100% Outcomes Exam Questions For You To Pass

ACP-Sec1 Exam Dumps Contains FREE Real Quesions from the Actual Exam

Alibaba ACP-Sec1 Exam Syllabus Topics:

Topic	Details
Topic 1	Security application solution design, such as correct understanding and handling after receiving alerts from the console, e-mails or text messages
Topic 2	Understanding the positioning, main features, working principles and application scenarios of the above products
Topic 3	Characteristic, application scenarios, competitive edges and features of Alibaba Cloud Anti-DDos and WAF
Topic 4	Cloud service-related basic security protocols such as HTTP, FTP, TCP, UDP and ICMP Understanding common security risks of the above products
Topic 5	Characteristics, application scenarios and features of Alibaba Cloud security management-related products
Topic 6	Discovering DDoS attacks, brute force password cracking attacks Security advantages of their combined solutions
Topic 7	web SQL injections among other common security risks and taking appropriate measures for protection
Topic 8	Core security products: basic operations and management of Anti-DDoS, Security Center, SSL Certificate, Content Moderation, Key Management Service

Q31. After a customer uses Alibaba Cloud Anti-DDoS Premium Service, a 502 error is prompted. Which of the followings are the possible causes of the error? (Number of correct answers 3)

Network congestion or jitter occurred

The IP address of the origin site is exposed and suffered an attack

The service was configured using the IP address method instead of the CI

The Anti-DDoS Service IP range was not released As a result, the origin site is blocked.

Q32. After you install the Alibaba Cloud Security center agent on a non with your Alibaba Cloud account*?

The user name and password

Your AccessKey

Your account ID

The installation verification key generated on the console

Q33. When a Layer-4 forwarding rule is configured with multiple origin site IP addresses, Alibaba Cloud Anti-ODoS Premium Service will perform load balancing for Layer-4 requests using balancing algorithm

True

False

Q34. After opening the Task Manager in Windows, you can easily see abnormal processes whose names do not comply with English grammar or computer naming conventions or contain random strings. Which of the following processes may be abnormal? (Number of correct answers: 4)

svchost exe

nihao exe

Ikdhpec exe

RegSrvc exe

eeosec exe

466363.exe

Q35. When submitting requests to the Content Moderation service API, which HTTP method should you use?

HEAD

PUT

GET

POST

Q36. A large Internet company has services running on physical machines, as well as self-built monitoring and alert system Recently, the company wants to migrate part of the services to Alibaba Cloud and use CloudMonitor to monitor ECS instances and set alerts What should the company do to quickly interconnect CloudMonitor alerts with the self-built alert system, and handle both alerts (alerts about the physical machines and ECS instances) in self-built alert system?

Use the Event Monitoring function provided by CloudMonitor to consume alerts sent from self-built alert system

Call the API for querying data provided by CloudMonitor. regularly query data, and write a code to check whether indicators are abnormal

Call the API for obtaining messages and alerts that are sent to self-build alert system

This cannot be implemented.

Q37. There is a limit on the number of Customer Master Keys (CMKs) that users can create using Key Management Service (KMS), but users can raise this limit by submitting a support ticket to Alibaba Cloud.

True

False

Q38. The ScheduleKeyDeletion function lets you schedule a time to delete Key Management Service (KMS) keys.
How far in the future can a key deletion event be scheduled?

7 days

30 days

15 days

60 days

Q39. When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.

True

False

Q40. Your applications are deployed on Alibaba Cloud ECS instances. You want to collect indicators by yourself for application layer monitoring. Which of the following functions provided by Alibaba Cloud CloudMonitor can be used for indicator collection, aggregation, and alerting?

CloudMonitor cannot meet these requirements

Cloud service monitoring

Site monitoring

Custom monitoring

Q41. Alibaba Cloud Anti-DDoS Premium Service can be used to protect against DDoS attacks larger than 100 Gbps. It can be used to protect both Alibaba Cloud hosts and non-Alibaba Cloud hosts

True

False

Q42. More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.

True

False

Q43. For which of the following protection scenarios is Alibaba Cloud WAF applicable? (Number of correct answers: 5)

Data leakage prevention

Defense against website trojans and tampering

Virtual vulnerability patches

Protection against malicious CC attacks

Brute force cracking protection

Protection against SMS refresh and service data crawling

Q44. Alibaba Cloud WAF is a security protection product based on Alibaba Group’s web security defense experience accumulated over more than a decade By defending against common OWASP attacks, providing patches to fix vulnerabilities, and allowing users to customize protection policies for website services, WAF can successfully safeguard the security and availability of websites and web applications. Which of the following types of security configurations does WAF provide? (Number of correct answers 3)

Port access control

CC protection

Web application attack protection

Precision access control

Q45. Alibaba Cloud WAF currently supports web security protection for HTTP and HTTPS. Which of the following ports are usually used for HTTP and HTTPS protocols? (Number of correct answers: 2)

443

Q46. If you activate Alibaba Cloud Security Center on an ECS Linux instance and change the default SSH port (22) to another port, you will no longer receive SMS or email notification related to brute force password cracking

True

False

Q47. Anti-DDoS is one of the major products of Alibaba Cloud Security service Many websites have suffered DDoS attacks of different types. Therefore, accurate understanding of DDoS attacks is critical to the website security protection. Which of the following statements about DDoS attacks is the MOST accurate?

The main purpose of a DDoS attack is to prevent the target server from providing normal services

A DDoS attack cracks the servers logon password by means of numerous attempts

The purpose of a DDoS attack is to steal confidential information

DDoS attacks primarily target a database

Q48. Anti-DDoS Premium Service is a value-added service intended to address the problem of service interruption caused by DDoS attack to servers including non-Alibaba Cloud hosts) Users can configure a protected IP address so that the attack traffic can be redirected to this IP address, thereby ensuring the stability and reliability of the origin site. When a user configures Anti-DDoS Premium Service and imports an HTTPS certificate, the system prompts an “incorrect parameter format” error Which of the following is NOT the reason of this error?

The certificate contains strings like “–“

The name of the certificate contains invalid letters

The certificate contains nonstandard content

The name of the certificate is too long to be accepted

Q49. Alibaba Cloud’s CloudMonitor can not only monitor ECS instances in a secure and efficient way, but also monitor HTTP sites of clients’ servers in data centers However, in the latter case, Alibaba Cloud does not provide monitor agent so users need to develop their own scripts to collect data

True

False

Q50. A customer built his website on Alibaba Cloud- To defend against Web attacks he activated Alibaba Cloud WAF However, a week later, the customer finds that his website has suffered intrusion. Which of the following actions should he take to ensure that WAF functions correctly and enhance system security?
(Number of correct answers: 4)

Use Security Center to remove Trojans and fix vulnerabilities

Delete all snapshots and clear the server

Secure other HTTP services on the ECS instance using WAF

Configure a security group for the ECS instance.

Check whether or not the DNS resolution results point to the WAF address

Resolve the website domain name to the site s source IP address

Q51. You have bought an ECS instance on Alibaba Cloud After deploying a Python environment on it, which of the following is the easiest and quickest way to monitor whether the Python process is running normally and report an alert if the process is accidentally terminated?

Use site monitoring

Log on to the ECS instance console

Utilize process monitoring feature (can be found in ECS instance

Write a script for monitoring by yourself.

Q52. You want to buy an SSL certificate using Alibaba Cloud’s SSL Certificates Service and deploy it in front of an Alibaba Cloud resource (such as Elastic Compute Service) What is the coned sequence of steps to follow?

1 Select a certificate
2. Deploy the certificate in front of your Alibaba Cloud resources
3. Enter request information and submit for review
4. Manage the certificate

1 Select a certificate
2 Enter request information and submit for review
3 Manage the certificate
4 Deploy the certificate in front of your Alibaba Cloud resources

1 Select a certificate
2 Enter request information and submit for review
3. Deploy the certificate in front of your Alibaba Cloud resources
4. Manage the certificate

1 Enter request information and submit for review 2. Select a certificate
3 Deploy the certificate in front of your Alibaba Cloud resources
4 Manage the certificate

Q53. The protection rules of Alibaba Cloud WAF are updated in real time after a user makes changes in WAF configuration page.

True

False

Q54. Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications Which of the following functions are currently provided by CloudMonitor? (Number of correct answers: 4)

Custom firewall

Alerting

Site monitoring

Cloud service monitoring

Custom monitoring

Loading …