ACP-Sec1 by Alibaba Valid Free Exam Practice Test

Question 1

Which of the following services can be protected by the Alibaba Cloud Security Center's anti-brute force password cracking function? (Number of answers 3)

A. MySQL database service SQLServer database service B. Web service (HTTP) C. File transfer service (FTP) D. Windows remote desktop service (RDP) Linux remote control service (SSH)

Correct Answer: A,B,C

Question 2

You have set an alert policy for the disk usage of an ECS instance by using Alibaba Cloud CloudMonitor Each measurement cycle lasts for 5 minutes, during which the average disk usage is measured If the average disk usage exceeds 80% for five consecutive measurement cycles, an alert will be reported After your average disk usage exceeds 80%, how long will it take to receive an alert with the best case scenario?

A. 30 minutes B. 20 minutes C. 40 minutes D. 0 minutes

Correct Answer: A

Question 3

Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?

A. Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time B. Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance. C. Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks D. You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes

Correct Answer: B

Question 4

After you activate the button Data Risk Control feature in Alibaba Cloud WAF. Which of the following risk control verification modes m displayed if you directly request for a risk control protection URL?

A. Slider verification B. QR code verification C. Digit verification D. Image verification

Correct Answer: A

Question 5

Alibaba Cloud Security Center Agent is installed in ECS instances by default, no need to install it manually Users can detach Security Center Agent at any time they desire.

A. False B. True

Correct Answer: A

Question 6

Border Gateway Protocol (BGP) is mainly used for interconnection between autonomous systems (AS) on the Internet It. Controlling route transmission and selecting the best route Alibaba Cloud uses a BGP multi-line access mechanism for all its IDCs in China. Which of the followings are advantages of a BGP multi-line IDC?
(Number of correct answers 2)

A. High-speed interconnection B. Elimination of access barriers between North China and South China because China is big and North China and South China has different telecom operators C. Larger bandwidth D. Low bandwidth cost

Correct Answer: A,B

Question 7

After a customer uses Alibaba Cloud Anti-DDoS Premium Service, a 502 error is prompted. Which of the followings are the possible causes of the error? (Number of correct answers 3)

A. The service was configured using the IP address method instead of the CI B. The IP address of the origin site is exposed and suffered an attack C. Network congestion or jitter occurred D. The Anti-DDoS Service IP range was not released As a result, the origin site is blocked.

Correct Answer: B,C,D

Question 8

Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications Which of the following functions are currently provided by CloudMonitor? (Number of correct answers: 4)

A. Custom firewall B. Alerting C. Site monitoring D. Cloud service monitoring E. Custom monitoring

Correct Answer: B,C,D,E

Question 9

When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?

A. This alert does not matter and can be ignored. B. Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance C. Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert. D. Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures

Correct Answer: B

Alibaba ACP Cloud Security Professional - ACP-Sec1 Exam Practice Test