Question No : 1
Which of the following scenarios should be handled by anti-DDOS service? (the number of correct answers: 3)

• A.Server is under syn flood attack, and is not reachable
• B.online game service which is suffering with too many empty connections and slow connections
• C.DNS server is under udp flood attack and got no response anymore
• D.website is under SQL injection attack
• E.website is under XSS attacks

Show Answers

Answer:

Question No : 2
In the Alibaba Cloud, which services can satisfy client user identity management requirements?

• A.Security group
• B.Server Guard
• C.Resource Access Management (RAM)
• D.Situational awareness

Show Answers

Answer:

Question No : 3
Which of the following protocol is dedicated to resolve IP and MAC addresses?

• A.TCP
• B.ARP
• C.DNS
• D.ICMP

Show Answers

Answer:

Question No : 4
Which of the following statements is NOT true about web application security protection best practices?

• A.enforce security management to any public service
• B.keep installing official released patches will be good enough
• C.keep monitoring system processes, performance and status
• D.always scan input by user through web application

Show Answers

Answer:

Question No : 5
Which of the following statements is NOT true about daily operation on server account and password maintenance?

• A.change ‘Administrator' to some other name
• B.with ‘Server Guard protection In Allbaba Cloud, you can set password to some easy to remember words.
• C.except for some necessary accounts for system manogement, dlsoble or delete other seldomly used accounts
• D.always set a complexed passwcwd using combination of numbers, letters and other characters

Show Answers

Answer:

Question No : 6
After using WAF, if you find there are many user input data in the network traffic, you should apply:

• A.Loose protection policy
• B.Normal protection policy
• C.Strict protection policy
• D.Progression protection policy

Show Answers

Answer:

Question No : 7
Which of the following application vulnerabilities are not as popular as others?

• A.SQL Injection
• B.XSS exploit
• C.File uploading vulnerability
• D.Kernel privilege breaking

Show Answers

Answer:

Question No : 8
Which of the following statements is NOT true about EIP and NAT gateway?

• A.NAT gateway can support multi servers inside VPC to access public internet through one public IP
• B.EIP can be bind to different ECS servers at the same time
• C.Different EIP can't share bandwidth
• D.NAT gateway can support shared bandwidth between several ips

Show Answers

Answer:

Question No : 9
Which of the following statements about HTTP protocol are true? (the number of correct answers: 2

• A.HTTP protocol support state keeping
• B.HTTP is based on TCP/IP protocol
• C.HTTP request supports methods like: GET, POST, PUT, HEAD, etc.
• D.Response code 200 in HTTP protocol means exception on server side

Show Answers

Answer:

Question No : 10
What of the followings will happen if encounter DoS or DDoS attack?

• A.Data received successfully
• B.Delay of data reception
• C.Slow access web resources
• D.unauthorized access control

Show Answers

Answer: