ACP-Sec1無料問題集「Alibaba ACP Cloud Security Professional」

質問 1

If you install Alibaba Cloud Security Center client on a non-Alibaba Cloud server, which of the following statements allows you to check the server-related reports on the Security Center?

（A）You cannot check the reports on the Alibaba Cloud console.

（B）Security Center does not support non-Alibaba Cloud servers

（C）Associate the Security Center client with your Alibaba Cloud official website account.

（D）You need to manually install the agent on the external server, and use a verification key to associate it with your account

正解：D 解答を投票する

質問 2

Anti-DDoS is one of the major products of Alibaba Cloud Security service Many websites have suffered DDoS attacks of different types. Therefore, accurate understanding of DDoS attacks is critical to the website security protection. Which of the following statements about DDoS attacks is the MOST accurate?

（A）DDoS attacks primarily target a database

（B）The purpose of a DDoS attack is to steal confidential information

（C）A DDoS attack cracks the servers logon password by means of numerous attempts

（D）The main purpose of a DDoS attack is to prevent the target server from providing normal services

正解：D 解答を投票する

質問 3

To improve system security and protect the system from DDoS attacks, you can use Alibaba Cloud Anti-DDoS Premium Service. Which of the following products can be used together with Alibaba Cloud Anti-DDoS Service to improve the system access capabilities? (Number of correct answers 3)

（A）CDN

（B）WAF

（C）RDS

（D）Server Load Balancer

正解：A、B、D 解答を投票する

質問 4

If you activate Alibaba Cloud Security Center on an ECS Linux instance and change the default SSH port (22) to another port, you will no longer receive SMS or email notification related to brute force password cracking

（A）False

（B）True

正解：A 解答を投票する

質問 5

More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.

（A）False

（B）True

正解：A 解答を投票する

質問 6

To improve ECS instance security, the administrator does not want users on public network to check whether an ECS instance is online using the ping command. Which of the following reinforcement measures designed by the administrator is NOT feasible?

（A）Resolve the IP address of the ECS instance to an uncommon level 4 domain name, and point the promotional domain name to the level 4 domain name through CNAME

（B）Enable a security group, and reject ICMP for public network access.

（C）Enable a security group and only allow access from ports 80 and 25 of the public network through TCP

（D）Enable an operating system firewall for the ECS instance, and reject ICMP for public network access.

正解：A 解答を投票する

質問 7

Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?

（A）Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time

（B）Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.

（C）Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks

（D）You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes

正解：B 解答を投票する

質問 8

Alibaba Cloud Data Risk Control utilizes Alibaba Group's Big Data computing capabilities and industry-leading, risk decision making engine to address fraud threats in key service processes (such as account log on, online activity, payment) and avoid financial loss Which of the following is NOT an application scenario of Data Risk Control?

（A）Goods payment

（B）Account registration

（C）Transaction rating

（D）Application installation

正解：D 解答を投票する

質問 9

You have helped a customer set up a content filtering solution based on Content Moderation service However, the customer is complaining that certain images are getting incorrectly flagged as pornographic content. What can you do to help fix this?

（A）Ask your customer to use different images on their site

（B）Create an "Image Library" from the Content Moderation console and add the images to the Image Library's whitelist

（C）Open a ticket with Alibaba Cloud support, and send them a copy of the images, so that they can tune Content Moderation's detection algorithms

（D）Modify the images until Content Moderation service starts marking them as pornographic.

正解：B 解答を投票する

ACP-Sec1 無料問題集「Alibaba ACP Cloud Security Professional」

弊社を連絡する

関連リンク

トップ試験