ACP-Sec1 by Alibaba Actual Free Exam Q&As

Question 1

Alibaba Cloud Security Center Agent is installed in ECS instances by default, no need to install it manually Users can detach Security Center Agent at any time they desire.

A. False B. True

Discussion 0

Correct Answer: A Vote an answer

Question 2

Alibaba Cloud's CloudMonitor can not only monitor ECS instances in a secure and efficient way, but also monitor HTTP sites of clients' servers in data centers However, in the latter case, Alibaba Cloud does not provide monitor agent so users need to develop their own scripts to collect data

A. False B. True

Discussion 0

Correct Answer: A Vote an answer

Question 3

For which of the following protection scenarios is Alibaba Cloud WAF applicable? (Number of correct answers: 5)

A. Virtual vulnerability patches B. Protection against malicious CC attacks C. Brute force cracking protection D. Protection against SMS refresh and service data crawling E. Defense against website trojans and tampering F. Data leakage prevention

Discussion 0

Correct Answer: A,B,C,E,F Vote an answer

Question 4

When importing key material into Key Management Service (KMS), you will be given an import token and public encryption key valid for 24 hours. The public key KMS provides must be used to encrypt your key material before upload KMS allows you to choose different public key encryption algorithms Which ones are supported? (Number of correct answers; 3)

A. RSAES_OAEP_SHA_256 B. RSAES PKCS1 V1 5 C. RSAES_OAEP_SHA_1 D. RSAES_ECDHE_V1 _5

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 5

After you install the Alibaba Cloud Security center agent on a non with your Alibaba Cloud account*?

A. The installation verification key generated on the console B. Your AccessKey C. The user name and password D. Your account ID

Discussion 0

Correct Answer: B Vote an answer

Question 6

Alibaba Cloud Security Center provides patch management service, where are the patches published from?

A. Officially published by operating system vendors B. Contributed by netizens from open-source communities C. Developed by Alibaba Cloud D. Officially published by application vendors

Discussion 0

Correct Answer: B Vote an answer

Question 7

More and more blackmail attacks (using hacking tools or ransomware) have been detected among recent network security events, causing ever greater damage and financial loss. Which of the following measures can help Alibaba Cloud customers reduce risks in blackmail attacks? (Number of correct answers 3)

A. When remotely operating and maintaining an ECS instance use the superuser account for login at all times B. Use strong passwords with more than 15 characters for the accounts of all types of cloud services C. Deploy different service applications on servers with the same security level and security domain, and ensure unified policy management and defense D. If remote O&M is required use IpsecVPN or SSL VPN remote solutions E. Enable images and snapshots for ECS instances, back up data every day, and keep more than three redundant copies

Discussion 0

Correct Answer: B,D,E Vote an answer

Question 8

You have set an alert policy for the disk usage of an ECS instance by using Alibaba Cloud CloudMonitor Each measurement cycle lasts for 5 minutes, during which the average disk usage is measured If the average disk usage exceeds 80% for five consecutive measurement cycles, an alert will be reported After your average disk usage exceeds 80%, how long will it take to receive an alert with the best case scenario?

A. 0 minutes B. 30 minutes C. 20 minutes D. 40 minutes

Discussion 0

Correct Answer: B Vote an answer

Question 9

Alibaba Cloud WAF currently supports web security protection for HTTP and HTTPS. Which of the following ports are usually used for HTTP and HTTPS protocols? (Number of correct answers: 2)

A. 443 B. 21 C. 22 D. 80

Discussion 0

Correct Answer: A,D Vote an answer

Alibaba ACP Cloud Security Professional - ACP-Sec1 Exam Practice Test