Alibaba ACA-Sec1 Exam Questions Instant Access

Question 1

Which of the following security vulnerability is not a 'Server Side' security issue?

ASQL injection

BSystem Command Execution vulnerability

CCSRF(cross site request fraud)vulnerability

DFile uploading vulnerability

Answer : C

Question 2

Which of the following statements are true about the difference between HTTP and HTTPS

(the number of correct answers: 2)

AHTTP must use port 80 and HTTPS must use port 443 to provide service

BHTTPS is more secure than HTTP regarding the way they transfer data

CData transferred through HTTPs is under encryption

DYou must buy commercial CA before you setup your own web server with HTTPS service

Answer : B, C

Question 3

What status transition flow a TCP client will go through in order to proactively establish connection and disconnect it?

ASYNC_SENT- ->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2-->TIME_WAIT

BSYNC_SENT- ->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2-->CLOSE_WAIT

CSYNC_RCVD- ->ESTABLISHED-->CLOSE_WAIT-->TIME_WAIT-->LAST_ACK

DSYNC_SENT- ->SYNC_RCVD-->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2

Answer : A

Question 4

Which of following statements is NOT true about anti-DDOS basics and anti-DDOS Pro?

Aboth can defend DDOS attack

Banti-DDOS pro is free to charge

Canti-DDOS pro has more capabilities to defend against DDOS attacks

Danti-DDOS pro can protect both inside and outside Alibaba Cloud servers

Answer : B, D

Question 5

Which of following statements about the possible reasons that cause web server

vulnerabilities are true? (the number of correct answers: 2)

Score 1

ABugs generated during common component development

BHardware configuration is not up to date

CSoftware used or OS itself contain some logic flaw

DEnd user didn't follow the user manual

Answer : A, C

Question 6

Which of the following methods can't be used to prevent SQL injection attack?

AStrict input check

BUse secured function call

CSQL precompiling and variable binding

DWarning message for abnormal input

Answer : D

Question 7

Which of following attacks could serve as a CC attack? (the number of correct answers: 3)

Score 1

ASYN flood

BICMP flood

COne host simulate many IP addresses

DAttack through agent

EZombie network

Answer : C, D, E

Alibaba ACA Cloud Security Certification ACA-Sec1 Exam Questions