Alibaba ACP-Sec1 Exam Questions Instant Access

Question 1

If you install Alibaba Cloud Security Center client on a non-Alibaba Cloud server, which of the following statements allows you to check the server-related reports on the Security Center?

AAssociate the Security Center client with your Alibaba Cloud official website account.

BSecurity Center does not support non-Alibaba Cloud servers

CYou need to manually install the agent on the external server, and use a verification key to associate it with your account

DYou cannot check the reports on the Alibaba Cloud console.

Answer : C

Question 2

If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?

AAfter buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks

BAfter buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks

CThe administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports

DAfter buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks

Answer : B

Question 3

Alibaba Cloud Security's Data R.sk Control can effectively resolve junk registration, database hacking, and other service risk identification problems To use this service. you need to first collect service dat

a. Which of the following methods can be used to collect information off Web application

systems?

AJavaScript

BSDK

CJavaScript, SDK

DHTML5

Answer : A

Question 4

Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?

AAnti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time

BAnti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks

CAnti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.

DYou can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes

Answer : C

Question 5

You have bought an ECS instance on Alibaba Cloud After deploying a Python environment on it, which of the following is the easiest and quickest way to monitor whether the Python process is running normally and report an alert if the process is accidentally terminated?

AUse site monitoring

BLog on to the ECS instance console

CUtilize process monitoring feature (can be found in ECS instance

DWrite a script for monitoring by yourself.

Answer : C

Question 6

Data transfer between Internet devices requires specific specifications, which are called "protocols" Among those, the invention of a certain protocol played a decisive role in the creation of the Internet. By using those protocols, tens of thousands of computers can be connected and communicate with each other What is the following protocol is not defined in OSI 7 layer model?

AHTTP

BTCP

CUDP

DSOAP

Answer : D

Question 7

baba Cloud security service provides in-depth defense Which of the following services is dedicated for host security?

AAnti-DDoS pro Service

BWAF

CSecurity Center

DData Risk Control

Answer : A

Alibaba ACP Cloud Security Certification ACP-Sec1 Exam Questions