ACA-Sec1 無料問題集「Alibaba ACA Cloud Security Certification」

（A）ECS security group setting

（B）OS vulnerability inside ECS

（C）Web service security inside ECS

（D）Cloud infrastructure security

（A）Ultimate Version

（B）Advanced Version

（C）Standard Version

（D）Enterprise Version

（A）Cloud platform log

（B）Application log

（C）Hypervisor log

（D）OS system log

（A）for users who is using IAAS service, they should be responsible for their business system which is on top of cloud infrastructure

（B）cloud service provider should guarantee the security of all physical infrastructure

（C）cloud user should also take care of some of the hardware maintenance and operation work

（D）the damage caused by attacks leveraging security vulnerability in customers' application server should be charged to cloud service provider

（A）stronger defending attacks capability

（B）can protect IDC outside Alibaba Cloud

（C）can do anti-fraud protection

（D）no upper limit to the attack traffic need to be handled

（E）elastic protection bandwidth

（A）this feature can only used for single page, can't be used to protect the whole domain name

（B）direct access URL protected by this feature will have slider verification pop out

（C）WAF need to inject JavaScript piece into all pages under the same protected domain name to decide if the client side is worth to trust

（D）this feature is not suitable for scenario needs to call API directly

（A）Always ask for user's permission before installation

（B）Automatically install any upgrade if available

（C）Set a fixed upgrade schedule

（D）never check for upgrade

（A）restart the whole WAF service

（B）add one protection rule

（C）turn on protection switch manually

（D）Update cache

（A）Server Guard Agent will automatically scan your web pages directories and look for any webshell file.

（B）Server Guard will delete any suspicious webshell file immediately
My

（C）A change to a file in the web pages directories will trigger a scan for that file

（D）you can log on to the Server Guard console to isolate webshell files with one click.

（A）hot fix means the host need to reach some temperature upper limit to be able to proceed

（B）service will not be available during the hot fix

（C）hot fix is transparent to end user

（D）hot fix doesn't need to reboot physical host