Free Demo Questions

Test Online Free AliCloud ACA-Sec1 Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free ACA-Sec1 question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated Nov 25, 2020 30 Questions 2 Pages

Get ACA-Sec1 Full Access

Question 1 Selectable Answer

Which of the following scenarios should be handled by anti-DDOS service? (the number of correct answers: 3)

A. Server is under syn flood attack, and is not reachable
B. online game service which is suffering with too many empty connections and slow connections
C. DNS server is under udp flood attack and got no response anymore
D. website is under SQL injection attack
E. website is under XSS attacks

Answer:

Question 2 Selectable Answer

In the Alibaba Cloud, which services can satisfy client user identity management requirements?

A. Security group
B. Server Guard
C. Resource Access Management (RAM)
D. Situational awareness

Answer:

Question 3 Selectable Answer

Which of the following protocol is dedicated to resolve IP and MAC addresses?

A. TCP
B. ARP
C. DNS
D. ICMP

Answer:

Question 4 Selectable Answer

Which of the following statements is NOT true about web application security protection best practices?

A. enforce security management to any public service
B. keep installing official released patches will be good enough
C. keep monitoring system processes, performance and status
D. always scan input by user through web application

Answer:

Question 5 Selectable Answer

Which of the following statements is NOT true about daily operation on server account and password maintenance?

A. change ‘Administrator' to some other name
B. with ‘Server Guard protection In Allbaba Cloud, you can set password to some easy to remember words.
C. except for some necessary accounts for system manogement, dlsoble or delete other seldomly used accounts
D. always set a complexed passwcwd using combination of numbers, letters and other characters

Answer:

Question 6 Selectable Answer

After using WAF, if you find there are many user input data in the network traffic, you should apply:

A. Loose protection policy
B. Normal protection policy
C. Strict protection policy
D. Progression protection policy

Answer:

Question 7 Selectable Answer

Which of the following application vulnerabilities are not as popular as others?

A. SQL Injection
B. XSS exploit
C. File uploading vulnerability
D. Kernel privilege breaking

Answer:

Question 8 Selectable Answer

Which of the following statements is NOT true about EIP and NAT gateway?

A. NAT gateway can support multi servers inside VPC to access public internet through one public IP
B. EIP can be bind to different ECS servers at the same time
C. Different EIP can't share bandwidth
D. NAT gateway can support shared bandwidth between several ips

Answer:

Question 9 Selectable Answer

Which of the following statements about HTTP protocol are true? (the number of correct answers: 2

A. HTTP protocol support state keeping
B. HTTP is based on TCP/IP protocol
C. HTTP request supports methods like: GET, POST, PUT, HEAD, etc.
D. Response code 200 in HTTP protocol means exception on server side

Answer:

Question 10 Selectable Answer

What of the followings will happen if encounter DoS or DDoS attack?

A. Data received successfully
B. Delay of data reception
C. Slow access web resources
D. unauthorized access control

Answer:

Question 11 Selectable Answer

A DoS attack that sends a flood of synchronization (SYN) requests and never sends the final acknowledgement (ACK) is typically known as which of the following?

A. Smurf
B. Ping Flood
C. Fraggle
D. SYN flood

Answer:

Question 12 Selectable Answer

Customer who bought ECS server doesn't need to worry about:

A. Cloud infrastructure security
B. OS vulnerability inside ECS
C. Web service security inside ECS
D. ECS security group setting

Answer:

Question 13 Selectable Answer

If your company has a lot of employees who would try to simultaneously access ECS server protected by 'Server Guard' using your company's intranet, the 'Sever Guard' may mistakenly identify those access requests as attacks .
Which of the following methods is the best way to solve this problem? Score 2

A. set a highly complexed administrator password
B. change the rule of security group to unblock all company internal ips
C. add those IPs which need to access ECS server into 'Server Guard' logon white list
D. ask employees to access that ECS server not very frequently

Answer:

Question 14 Selectable Answer

Which of the following functions does not belong to what WAF can provide?

A. DB encryption
B. SQL injection detection
C. XSS attack detection
D. unauthorized resource access blocking

Answer:

Question 15 Selectable Answer

By default, servers in VPC can't communicate with internet. By implementing which of the following products these servers can gain the capability to communicate with internet? (the number of correct answers: 3)

A. Elastic Public IP
B. CDN
C. EIP + SLB
D. EIP + NAT Gateway
E. DNS service

Answer:

Current Exam

ACA-Sec1

AliCloud
ACA Cloud Security Associate

View Full ACA-Sec1 Package