ACA-Sec1 Exam Training Practice Tests (Alibaba ACA Cloud Security Certification)]

Question 1

In Linux OS, if access control to a file is shown as '-rwxrw-r--' in shell command, which of the following statements are true?
Score 2

A. The owner of this file has read/write/execution privilege to this file B. Other users (outside of this user group) can execute this file C. The access privilege of this user group is read only D. This file is a text file

Correct Answer: A

Question 2

Which of the following scenarios should be handled by anti-DDOS service? (the number of correct answers: 3)

A. Server is under syn flood attack, and is not reachable B. website is under SQL injection attack C. online game service which is suffering with too many empty connections and slow connections D. DNS server is under udp flood attack and got no response anymore E. website is under XSS attacks

Correct Answer: A,C,D

Question 3

Using ECS security group can help you achieve:

A. fine grained access control to you server B. enlarge your network bandwidth C. better CPU usage D. apply QOS to a specific IP

Correct Answer: A

Question 4

In order to stop the service provided through a particular port in Windows OS, which of the following methods can be used to achieve this objective? (the number of correct answers: 3)

A. adjust local security policy B. stop all guest role access C. adjust firewall rule D. update OS patch E. stop the service itself

Correct Answer: A,C,E

Question 5

Which of the following methods can't be used against CC attack?

A. resolve domain name to a disguised IP B. use WAF C. change the service providing port D. change HTTP service to HTTPS service

Correct Answer: D

Question 6

After WAF was purchased, users need to add one DNS record to map their domain name to WAF provided IP. What is the type of that DNS record?

A. MX Record B. CNAME Record C. TXT Record D. A record

Correct Answer: B

Question 7

Which of the following function is NOT provided by 'Server Guard' vulnerability detection?

A. Linux system vulnerability scanning B. sensitive data encryption C. Trojan detection D. weak password detection

Correct Answer: B

Question 8

When we talk about 'security vulnerability' of ECS server, we are referring to: (the number of correct answers: 3)

A. Hardware fault B. Hypervisor Vulnerability C. Data Center Serviceability D. Application Vulnerability E. OS vulnerability

Correct Answer: B,D,E

Alibaba ACA Cloud Security Certification - ACA-Sec1 Exam Practice Test