New 2021 ACP-Sec1 exam questions Welcome to download the newest PracticeVCE ACP-Sec1 PDF dumps (82 Q&As)
P.S. Free 2021 Alibaba Security ACP-Sec1 dumps are available on Google Drive shared by PracticeVCE
NEW QUESTION 16
When submitting requests to the Content Moderation service API, which HTTP method should you use?
- A. HEAD
- B. POST
- C. GET
- D. PUT
Answer: B
NEW QUESTION 17
Cloud computing service security requires the joint effort of the cloud service supplier (such as Alibaba Cloud), independent software vendor (ISV), and users The failure of any party to fulfill their responsibilities may lead to security risks. Which of the following are the responsibilities of the cloud computing service users? (Number of correct answers 2)
- A. Provide security protection for physical infrastructure
- B. Strengthen information security management in the company to prevent sensitive information leakage
- C. Ensure multi-channel power supply in the Cloud data center
- D. Regularly change the service system password
Answer: B,D
NEW QUESTION 18
You are importing your own key material in to Key Management Service (KMS). Which of the following is the correct sequence of steps to follow?
- A. 1 Create an external key
2 Get the "import key material" parameters
3 Import the key material - B. 1 Get the "import key material" parameter
2 Create an external key
3. Import the key material - C. 1 Import the key material
2 Get the "import key material" parameters
3 Create an external key - D. 1 Create an external key
2 Import the key material
3 Get the "import key material" parameters
Answer: A
NEW QUESTION 19
Alibaba Cloud WAF currently supports web security protection for HTTP and HTTPS. Which of the following ports are usually used for HTTP and HTTPS protocols? (Number of correct answers: 2)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A,B
NEW QUESTION 20
Alibaba Cloud WAF cannot protect against large traffic DDoS attacks which can be solved by Alibaba Cloud Ant-DDoS Service.
- A. True
- B. False
Answer: A
NEW QUESTION 21
When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?
- A. This alert does not matter and can be ignored.
- B. Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert.
- C. Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance
- D. Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures
Answer: C
NEW QUESTION 22
Your applications are deployed on Alibaba Cloud ECS instances. You want to collect indicators by yourself for application layer monitoring. Which of the following functions provided by Alibaba Cloud CloudMonitor can be used for indicator collection, aggregation, and alerting?
- A. Custom monitoring
- B. Cloud service monitoring
- C. CloudMonitor cannot meet these requirements
- D. Site monitoring
Answer: A
NEW QUESTION 23
Which of the following attacks can Alibaba Cloud Anti-DDoS Basic defend against? (Number of coned answers 4)
- A. CMP Flood
- B. SYN Flood
- C. UDP Flood
- D. ACK Flood
- E. Brute force password cracking
Answer: B,C,D,E
NEW QUESTION 24
When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.
- A. True
- B. False
Answer: A
NEW QUESTION 25
Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications.
Which of the following statements about CloudMonitor is accurate'?
- A. CloudMonitor cannot be used through the Alibaba Cloud console
- B. To use CloudMonitor for ECS monitoring, there no agent needs to be installed in ECS.
- C. CloudMonitor must be independently bought and paid for activation
- D. CloudMonitor can monitor websites that are not deployed in Alibaba Cloud products.
Answer: D
NEW QUESTION 26
If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?
- A. The administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports
- B. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks
- C. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks
- D. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks
Answer: C
NEW QUESTION 27
Alibaba Cloud Security Center provides patch management service, where are the patches published from?
- A. Officially published by operating system vendors
- B. Contributed by netizens from open-source communities
- C. Officially published by application vendors
- D. Developed by Alibaba Cloud
Answer: B
NEW QUESTION 28
A website is built using open-source software To prevent hacker attacks and fix vulnerabilities in a timely manner, the administrator of the website wants to use the patch management feature in Security Center. Which of the following statements about patch management is FALSE.
- A. Vulnerabilities are automatically fixed Once a self-developed paten is released, it automatically fixes vulnerabilities for all customers who have enabled patch management.
- B. Rollback of Web vulnerabilities means to restore the original files, while rollback of Windows vulnerabilities means to uninstall the patch upgrade
- C. Patch management can operate machines in batches in the cloud. For large-scale vulnerabilities, it supports one-key patch upgrade, which is easy and convenient
- D. Before patches for most common Web vulnerabilities are released, the Alibaba Cloud Security O&M team will have fixed the vulnerabilities using self-developed patches
Answer: A
NEW QUESTION 29
To improve system security and protect the system from DDoS attacks, you can use Alibaba Cloud Anti-DDoS Premium Service. Which of the following products can be used together with Alibaba Cloud Anti-DDoS Service to improve the system access capabilities? (Number of correct answers 3)
- A. WAF
- B. CDN
- C. Server Load Balancer
- D. RDS
Answer: A,B,C
NEW QUESTION 30
Which of the following methods can be used to download the metric data of Alibaba Cloud CloudMonitor?
- A. You can only view the reports, but cannot download them.
- B. Download the data through Open APIs
- C. You can download the data through both the console and Open APIs
- D. Download the data from the console
Answer: C
NEW QUESTION 31
Before using the HTTPS protection feature in Alibaba Cloud WAF, you must upload the server certificate and private key beforehand.
- A. True
- B. False
Answer: A
NEW QUESTION 32
Clean bandwidth refers to the maximum normal clean bandwidth that can be processed by Anti-DDoS Premium instances when your business is not under attack. Make sure that the Clean bandwidth of the instance is greater than the peak value of the inbound or outbound traffic of all services connected to the Anti-DDoS Premium instances If the actual traffic volume exceeds the maximum Clean bandwidth, your business may be subject to traffic restrictions or random packet losses, and your normal business may be unavailable, slowed, or delayed for a certain period of time
- A. True
- B. False
Answer: A
NEW QUESTION 33
An Alibaba Cloud user buys an ECS instance and deploys Tomcat on it Which of the following is the easiest way for the user to monitor whether port 8080 (used by Tomcat) on this ECS instance is functioning normally or not?
- A. Log on to the ECS instance every hour to check the port using the command line.
- B. Use Alibaba Cloud CloudMonitor s site monitor feature to create a new Monitoring Task to monitor the port status.
- C. Write a script for detection and report the data to CloudMonitor.
- D. Buy a third-party monitoring tool
Answer: B
NEW QUESTION 34
You have set an alert policy for the disk usage of an ECS instance by using Alibaba Cloud CloudMonitor Each measurement cycle lasts for 5 minutes, during which the average disk usage is measured If the average disk usage exceeds 80% for five consecutive measurement cycles, an alert will be reported After your average disk usage exceeds 80%, how long will it take to receive an alert with the best case scenario?
- A. 30 minutes
- B. 40 minutes
- C. 0 minutes
- D. 20 minutes
Answer: A
NEW QUESTION 35
After a customer uses Alibaba Cloud Anti-DDoS Premium Service, a 502 error is prompted. Which of the followings are the possible causes of the error? (Number of correct answers 3)
- A. The IP address of the origin site is exposed and suffered an attack
- B. The Anti-DDoS Service IP range was not released As a result, the origin site is blocked.
- C. Network congestion or jitter occurred
- D. The service was configured using the IP address method instead of the CI
Answer: A,B,C
NEW QUESTION 36
When a Layer-4 forwarding rule is configured with multiple origin site IP addresses, Alibaba Cloud Anti-ODoS Premium Service will perform load balancing for Layer-4 requests using balancing algorithm
- A. True
- B. False
Answer: A
NEW QUESTION 37
You have helped a customer set up a content filtering solution based on Content Moderation service However, the customer is complaining that certain images are getting incorrectly flagged as pornographic content. What can you do to help fix this?
- A. Open a ticket with Alibaba Cloud support, and send them a copy of the images, so that they can tune Content Moderation's detection algorithms
- B. Create an "Image Library" from the Content Moderation console and add the images to the Image Library's whitelist
- C. Modify the images until Content Moderation service starts marking them as pornographic.
- D. Ask your customer to use different images on their site
Answer: B
NEW QUESTION 38
Anti-DDoS Premium Service is a value-added service intended to address the problem of service interruption caused by DDoS attack to servers including non-Alibaba Cloud hosts) Users can configure a protected IP address so that the attack traffic can be redirected to this IP address, thereby ensuring the stability and reliability of the origin site. When a user configures Anti-DDoS Premium Service and imports an HTTPS certificate, the system prompts an "incorrect parameter format" error Which of the following is NOT the reason of this error?
- A. The certificate contains nonstandard content
- B. The name of the certificate contains invalid letters
- C. The certificate contains strings like "--"
- D. The name of the certificate is too long to be accepted
Answer: A
NEW QUESTION 39
Which of the following configurations is NOT a feature provided by Alibaba Cloud Web Application Firewall product?
- A. Data Leakage Prevention
- B. Crawler Detection
- C. Blocked Regions
- D. HTTP ACL Policy
Answer: C
NEW QUESTION 40
You want to buy an SSL certificate using Alibaba Cloud's SSL Certificates Service and deploy it in front of an Alibaba Cloud resource (such as Elastic Compute Service) What is the coned sequence of steps to follow?
- A. 1 Select a certificate
2. Deploy the certificate in front of your Alibaba Cloud resources
3. Enter request information and submit for review
4. Manage the certificate - B. 1 Enter request information and submit for review 2. Select a certificate
3 Deploy the certificate in front of your Alibaba Cloud resources
4 Manage the certificate - C. 1 Select a certificate
2 Enter request information and submit for review
3. Deploy the certificate in front of your Alibaba Cloud resources
4. Manage the certificate - D. 1 Select a certificate
2 Enter request information and submit for review
3 Manage the certificate
4 Deploy the certificate in front of your Alibaba Cloud resources
Answer: D
NEW QUESTION 41
......
ACP-Sec1 exam questions from PracticeVCE dumps: https://www.practicevce.com/Alibaba/ACP-Sec1-practice-exam-dumps.html (82 Q&As)