ACP-Sec1 Exam Training Practice Tests (Alibaba ACP Cloud Security Professional)]

Question 1

You are importing your own key material in to Key Management Service (KMS). Which of the following is the correct sequence of steps to follow?

A. 1 Create an external key
2 Get the "import key material" parameters
3 Import the key material B. 1 Import the key material
2 Get the "import key material" parameters
3 Create an external key C. 1 Get the "import key material" parameter
2 Create an external key
3. Import the key material D. 1 Create an external key
2 Import the key material
3 Get the "import key material" parameters

Correct Answer: A

Question 2

A website is built using open-source software To prevent hacker attacks and fix vulnerabilities in a timely manner, the administrator of the website wants to use the patch management feature in Security Center. Which of the following statements about patch management is FALSE.

A. Vulnerabilities are automatically fixed Once a self-developed paten is released, it automatically fixes vulnerabilities for all customers who have enabled patch management. B. Patch management can operate machines in batches in the cloud. For large-scale vulnerabilities, it supports one-key patch upgrade, which is easy and convenient C. Rollback of Web vulnerabilities means to restore the original files, while rollback of Windows vulnerabilities means to uninstall the patch upgrade D. Before patches for most common Web vulnerabilities are released, the Alibaba Cloud Security O&M team will have fixed the vulnerabilities using self-developed patches

Correct Answer: A

Question 3

Anti-DDoS is one of the major products of Alibaba Cloud Security service Many websites have suffered DDoS attacks of different types. Therefore, accurate understanding of DDoS attacks is critical to the website security protection. Which of the following statements about DDoS attacks is the MOST accurate?

A. The purpose of a DDoS attack is to steal confidential information B. A DDoS attack cracks the servers logon password by means of numerous attempts C. The main purpose of a DDoS attack is to prevent the target server from providing normal services D. DDoS attacks primarily target a database

Correct Answer: C

Question 4

baba Cloud security service provides in-depth defense Which of the following services is dedicated for host security?

A. Data Risk Control B. WAF C. Anti-DDoS pro Service D. Security Center

Correct Answer: C

Question 5

Before using the HTTPS protection feature in Alibaba Cloud WAF, you must upload the server certificate and private key beforehand.

A. True B. False

Correct Answer: A

Question 6

A customer built his website on Alibaba Cloud- To defend against Web attacks he activated Alibaba Cloud WAF However, a week later, the customer finds that his website has suffered intrusion. Which of the following actions should he take to ensure that WAF functions correctly and enhance system security?
(Number of correct answers: 4)

A. Configure a security group for the ECS instance. B. Resolve the website domain name to the site s source IP address C. Secure other HTTP services on the ECS instance using WAF D. Check whether or not the DNS resolution results point to the WAF address E. Delete all snapshots and clear the server F. Use Security Center to remove Trojans and fix vulnerabilities

Correct Answer: A,C,D,F

Question 7

In a public cloud environment Alibaba Cloud is responsible for security of cloud computing infrastructure (such as the IDC environment, physical server O&M, and virtualization layer of cloud products). However, you still need to perform necessary security optimization measures for the Cloud products you purchased Which of the following actions do you think are safe?

A. To reduce the communication cost, five administrators of the company use the root account to log on to the ECS instance. B. For easy management, change the administrator password for the ECS instance to 123456. C. To enable colleagues working at home to update data, open public IP addresses for ApsaraDB for RDS instances, and allow all IP addresses to connect to the instances D. After buying an ECS instance, enable the security group firewall for the ECS instance through the console, and only allow a management IP address to remotely log on to the ECS instance.

Correct Answer: D

Question 8

You have helped a customer set up a content filtering solution based on Content Moderation service However, the customer is complaining that certain images are getting incorrectly flagged as pornographic content. What can you do to help fix this?

A. Open a ticket with Alibaba Cloud support, and send them a copy of the images, so that they can tune Content Moderation's detection algorithms B. Ask your customer to use different images on their site C. Create an "Image Library" from the Content Moderation console and add the images to the Image Library's whitelist D. Modify the images until Content Moderation service starts marking them as pornographic.

Correct Answer: C

Question 9

Cross Site Script (XSS) attacks refer to a kind of attack by tampering the webpage using HTML injection to insert malicious scripts so as to control the user's browser when the user browses the webpage XSS vulnerabilities may be used for user identity stealing (particularly the administrator identity), behavior hijacking, Trojan insertion and worm spreading, and also phishing

A. True B. False

Correct Answer: A

Alibaba ACP Cloud Security Professional - ACP-Sec1 Exam Practice Test