ACA-Sec1 無料問題集「Alibaba ACA Cloud Security Certification」

（A）router device

（B）enterprise major website

（C）offline backup tape devices

（D）online banking system

（A）IP address

（B）Router Location

（C）Protocol

（D）Port

（E）Encryption algorism

（A）for users who is using IAAS service, they should be responsible for their business system which is on top of cloud infrastructure

（B）cloud service provider should guarantee the security of all physical infrastructure

（C）cloud user should also take care of some of the hardware maintenance and operation work

（D）the damage caused by attacks leveraging security vulnerability in customers' application server should be charged to cloud service provider

（A）Attack through agent

（B）Zombie network

（C）One host simulate many IP addresses

（D）SYN flood

（E）ICMP flood

（A）Always ask for user's permission before installation

（B）Automatically install any upgrade if available

（C）Set a fixed upgrade schedule

（D）never check for upgrade

（A）website codes has some vulnerability

（B）RDS DB got unknown remote logon

（C）the disk in ECS is broken

（D）physical cable is cut by someone

（E）ECS admin password is hacked

（A）blackmail

（B）help to find system vulnerability

（C）technical skills show off of hacker

（D）business competition

（A）disable original server firewall

（B）enable CDN and change anti-DDOS pro IP to CDN address

（C）enable SLB for original server

（D）add anti-DDOS pro IP into customer firewall white list

（A）users in different VLAN can connect each other directly without pre-configuration

（B）VlAN can enhance the network security and data isolation

（C）VLAN configuration can be done through an TCP/IP router device

（D）different VLAN means different physical location of switches

（A）Early Warning

（B）Strict

（C）Normal

（D）Regular

（E）Loose