New 2022 ACP-Sec1 exam questions Welcome to download the newest PracticeVCE ACP-Sec1 PDF dumps (82 Q&As)
P.S. Free 2022 Alibaba Security ACP-Sec1 dumps are available on Google Drive shared by PracticeVCE
NEW QUESTION 40
You applied for an SSL certificate through Alibaba Cloud's SSL Certificates Service During the application, you selected "Manual" at the "CSR "" step. You now want to install your certificate on a server running Apache What must you do?
- A. You must revoke your certificate and re-apply, this time choosing "Automatic" at the "CSR Generation" step. Otherwise, the SSL certificate cannot be downloaded
- B. You can download a crt file of type "Other" from the SSL Certificates Service console, then use openssl to convert this file to pfx format for use with Apache
- C. You can use the "generate pfx file" function built into the SSL Certificates Service to manually generate and download the pfx file needed by Apache
- D. SSL Certificates Service doesn't support the type of certificates needed by Apache. They cannot be used together
Answer: C
NEW QUESTION 41
A customer built his website on Alibaba Cloud- To defend against Web attacks he activated Alibaba Cloud WAF However, a week later, the customer finds that his website has suffered intrusion. Which of the following actions should he take to ensure that WAF functions correctly and enhance system security?
(Number of correct answers: 4)
- A. Delete all snapshots and clear the server
- B. Resolve the website domain name to the site s source IP address
- C. Check whether or not the DNS resolution results point to the WAF address
- D. Configure a security group for the ECS instance.
- E. Use Security Center to remove Trojans and fix vulnerabilities
- F. Secure other HTTP services on the ECS instance using WAF
Answer: C,D,E,F
NEW QUESTION 42
When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.
- A. False
- B. True
Answer: B
NEW QUESTION 43
The protection rules of Alibaba Cloud WAF are updated in real time after a user makes changes in WAF configuration page.
- A. False
- B. True
Answer: B
NEW QUESTION 44
Among various types of network attacks, "phishing" is one of the most common attacks. A phishing website looks exactly the same as the real website It asks visitors to login with their accounts and passwords; at the same time, record these privacy information for illegal purpose. Which of the following statements about how phishing websites are spread is FALSE?
- A. Phishing website links are sent through Facebook. Twitter and other IM(instant Messenger) applications.
- B. Advertisements are pushed to search engines and small and medium websites, attracting users to click the phishing website links.
- C. Banks publish phishing website links in prominent positions on their official websites
- D. Phishing website links are published in batches through emails forums, blogs, and SNS(Social Network Sites).
Answer: C
NEW QUESTION 45
You have helped a customer set up a content filtering solution based on Content Moderation service However, the customer is complaining that certain images are getting incorrectly flagged as pornographic content. What can you do to help fix this?
- A. Create an "Image Library" from the Content Moderation console and add the images to the Image Library's whitelist
- B. Open a ticket with Alibaba Cloud support, and send them a copy of the images, so that they can tune Content Moderation's detection algorithms
- C. Modify the images until Content Moderation service starts marking them as pornographic.
- D. Ask your customer to use different images on their site
Answer: A
NEW QUESTION 46
Anti-DDoS Premium Service is a value-added service intended to address the problem of service interruption caused by DDoS attack to servers including non-Alibaba Cloud hosts) Users can configure a protected IP address so that the attack traffic can be redirected to this IP address, thereby ensuring the stability and reliability of the origin site. When a user configures Anti-DDoS Premium Service and imports an HTTPS certificate, the system prompts an "incorrect parameter format" error Which of the following is NOT the reason of this error?
- A. The certificate contains nonstandard content
- B. The certificate contains strings like "--"
- C. The name of the certificate is too long to be accepted
- D. The name of the certificate contains invalid letters
Answer: A
NEW QUESTION 47
After you install the Alibaba Cloud Security center agent on a non with your Alibaba Cloud account*?
- A. Your account ID
- B. The installation verification key generated on the console
- C. The user name and password
- D. Your AccessKey
Answer: D
NEW QUESTION 48
A large Internet company has services running on physical machines, as well as self-built monitoring and alert system Recently, the company wants to migrate part of the services to Alibaba Cloud and use CloudMonitor to monitor ECS instances and set alerts What should the company do to quickly interconnect CloudMonitor alerts with the self-built alert system, and handle both alerts (alerts about the physical machines and ECS instances) in self-built alert system?
- A. This cannot be implemented.
- B. Call the API for querying data provided by CloudMonitor. regularly query data, and write a code to check whether indicators are abnormal
- C. Call the API for obtaining messages and alerts that are sent to self-build alert system
- D. Use the Event Monitoring function provided by CloudMonitor to consume alerts sent from self-built alert system
Answer: B
NEW QUESTION 49
Which of the following permissions is required to manually install the Alibaba Cloud Security center agent on the server?
- A. Database permission
- B. Common user permission
- C. FTP service permission
- D. System administrator privilege
Answer: D
NEW QUESTION 50
As your business grows, you begin exceeding the maximum number of requests-per-minute supported by the Content Moderation API and requests begin to fail What is the best way to resolve this issue?
- A. Open a second Alibaba Cloud account, buy Content Moderation service under that account, and split your quests between these two accounts.
- B. Open a ticket and ask for the API request limits to be raised
- C. Build a custom message queue solution which you can use to buffer requests and spread them out over time
- D. There is nothing you can do to reoslve this problem, except to make fewer requests.
Answer: B
NEW QUESTION 51
More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.
- A. False
- B. True
Answer: A
NEW QUESTION 52
Alibaba Cloud WAF cannot protect against large traffic DDoS attacks which can be solved by Alibaba Cloud Ant-DDoS Service.
- A. False
- B. True
Answer: B
NEW QUESTION 53
If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?
- A. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks
- B. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks
- C. The administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports
- D. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks
Answer: D
NEW QUESTION 54
Your applications are deployed on Alibaba Cloud ECS instances. You want to collect indicators by yourself for application layer monitoring. Which of the following functions provided by Alibaba Cloud CloudMonitor can be used for indicator collection, aggregation, and alerting?
- A. Custom monitoring
- B. Cloud service monitoring
- C. Site monitoring
- D. CloudMonitor cannot meet these requirements
Answer: A
NEW QUESTION 55
If you install Alibaba Cloud Security Center client on a non-Alibaba Cloud server, which of the following statements allows you to check the server-related reports on the Security Center?
- A. You cannot check the reports on the Alibaba Cloud console.
- B. You need to manually install the agent on the external server, and use a verification key to associate it with your account
- C. Associate the Security Center client with your Alibaba Cloud official website account.
- D. Security Center does not support non-Alibaba Cloud servers
Answer: B
NEW QUESTION 56
To improve system security and protect the system from DDoS attacks, you can use Alibaba Cloud Anti-DDoS Premium Service. Which of the following products can be used together with Alibaba Cloud Anti-DDoS Service to improve the system access capabilities? (Number of correct answers 3)
- A. Server Load Balancer
- B. WAF
- C. RDS
- D. CDN
Answer: A,B,D
NEW QUESTION 57
Content Moderation service is useful m a wide variety of scenarios. Which of the following are the *most* suited to Content Moderation's capabilities? (Number of correct answers 2)
- A. Detecting sensitive customer information such as credit card numbers in uploaded images
- B. Detecting faces in images
- C. Deleting porn on a social networking site
- D. Detecting spam posts on a forum
Answer: C,D
NEW QUESTION 58
There is a limit on the number of Customer Master Keys (CMKs) that users can create using Key Management Service (KMS), but users can raise this limit by submitting a support ticket to Alibaba Cloud.
- A. False
- B. True
Answer: B
NEW QUESTION 59
Data Risk Control feature has been integrated into Alibaba Cloud WAF. When this function is activated, a script must be embedded into the page that wishes to be protected under the corresponding domain name to check whether a client is trustworthy. Which type of script is it?
- A. Vbscript
- B. JavaScript
- C. Java
- D. C++
Answer: B
NEW QUESTION 60
......
ACP-Sec1 exam questions from PracticeVCE dumps: https://www.practicevce.com/Alibaba/ACP-Sec1-practice-exam-dumps.html (82 Q&As)