ACP-Sec1 Exam Dumps - ACP Cloud Security Professional

Question # 4

Which of the following features are available in Alibaba Cloud Anti-DDoS Premium product? (Number of correct answers: 3)

SQL injection Attack blocking

Web application layer DDoS protection

Transport layer DDoS protection

Malformed packets filtering

Full Access

Question # 5

If you activate Alibaba Cloud Security Center on an ECS Linux instance and change the default SSH port (22) to another port, you will no longer receive SMS or email notification related to brute force password cracking

True

False

Full Access

Question # 6

User A is the system administrator of a company, who often takes business trips to Shanghai Each time when he remotely logs on to the Shanghai an alert is reported, prompting "Someone is remotely logging on to the server Please pay attention to your server security" Which of the following methods can be used to quickly and automatically resolve this issue?

Open a ticket immediately to consult Alibaba Cloud engineers

Log on to the Alibaba Cloud Security Center, and add a frequent logon location to the configuration item of Security Center.

Ask the company leaders for help

Call a friend, who is a famous hacker in the industry, for help.

Full Access

Question # 7

Which of the following configurations is NOT a feature provided by Alibaba Cloud Web Application Firewall product?

Blocked Regions

HTTP ACL Policy

Data Leakage Prevention

Crawler Detection

Full Access

Question # 8

When a Layer-4 forwarding rule is configured with multiple origin site IP addresses, Alibaba Cloud Anti-ODoS Premium Service will perform load balancing for Layer-4 requests using balancing algorithm

True

False

Full Access

Question # 9

When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors

If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?

This alert does not matter and can be ignored.

Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures

Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert.

Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance

Full Access

Question # 10

Users can detach the Security Center client on Alibaba Cloud ECS instances, and reinstall it later when necessary.

True

False

Full Access

Question # 11

When you receive a security alert from Alibaba Cloud Security Center, which of the following actions should you do?

The alert is dangerous You must immediately report it to the police

Shield the alert because it is not important

Once you receive an alert, you need to determine the specific risk and perform troubleshooting For example, change the password, or upgrade application software

There is no need to care about the alert Alibaba Cloud Security Center will handle it.

Full Access

Question # 12

After a customer uses Alibaba Cloud Anti-DDoS Premium Service, a 502 error is prompted. Which of the followings are the possible causes of the error? (Number of correct answers 3)

Network congestion or jitter occurred

The IP address of the origin site is exposed and suffered an attack

The service was configured using the IP address method instead of the CI

The Anti-DDoS Service IP range was not released As a result, the origin site is blocked.

Full Access