Free Demo Questions

Test Online Free AliCloud ACA-Sec1 Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free ACA-Sec1 question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated Nov 25, 2020 30 Questions 2 Pages

Get ACA-Sec1 Full Access

Question 16 Selectable Answer

Which of the following options could NOT be the reason that causes website tampering

A. Share password between different users
B. Botnet attack
C. system vulnerability is not fixed in time
D. Wrong security configuration

Answer:

Question 17 Selectable Answer

User A rented 2 ECS server and one RDS in Alibaba Cloud to setup his company public website.
After the web site will become available online, the security risks he/she will face will include: (the number of correct answers: 3)

A. physical cable is cut by someone
B. ECS admin password is hacked
C. website codes has some vulnerability
D. RDS DB got unknown remote logon
E. the disk in ECS is broken

Answer:

Question 18 Selectable Answer

Which of the following damages can't be caused by a DDOS attack Score 2

A. DNS service down
B. physical server broken
C. military commander system down
D. web service down

Answer:

Question 19 Selectable Answer

If Server Guard (product provided by Alibaba Cloud) report some brute force password hacking attacks, the reporting information will include (the number of correct answers: 3)

A. Attack initiated time
B. Attack type
C. Tools attacker used
D. Attack source IP
E. Physical location of attacker

Answer:

Question 20 Selectable Answer

Using ECS security group can help you achieve:

A. better CPU usage
B. fine grained access control to you server
C. enlarge your network bandwidth
D. apply QOS to a specific IP

Answer:

Question 21 Selectable Answer

Which of the following statements about cloud security shared responsibilities model are true? (the number of correct answers: 2)

A. for users who is using IAAS service, they should be responsible for their business system which is on top of cloud infrastructure
B. cloud service provider should guarantee the security of all physical infrastructure
C. the damage caused by attacks leveraging security vulnerability in customers' application server should be charged to cloud service provider
D. cloud user should also take care of some of the hardware maintenance and operation work

Answer:

Question 22 Selectable Answer

If your company's official website is tampered, the consequence of such attack could NOT be:

A. Website is used for some illegal attempts
B. Public image or reputation of your company is damaged
C. Business is impacted
D. Physical server is damaged

Answer:

Question 23 Selectable Answer

Anti-DDOS basic is provided by Alibaba Cloud for free .
Which of the following statements about this service are NOT true? (the number of correct answers: 2) Score 1

A. basic anti-DDOS service can detect attack traffic and migrate them automatically
B. basic anti-DDOS service can protect any server connect to internet
C. no protection upper limit to the rate of attack traffic
D. CC attack protection need to be turned on manually

Answer:

Question 24 Selectable Answer

May, 2017. New blackmail virus WannaCry burst globally.
This virus leveraged Windows OS opened port 445 to initiate the attack, so the quickest way to prevent this kind of attack is?

A. Change 'Administrator' to some other name
B. With 'Server Guard' protection in Alibaba Cloud, you can set password to some easy to remember words.
C. Except some necessary accounts for system management, disable or delete other useless accounts
D. Always set password with highly complex combination of number, letter and other characters

Answer:

Question 25 Selectable Answer

Which of the following HTTP status code does reflect that the requested page does not exist?

A. 403
B. 404
C. 201
D. 304

Answer:

Question 26 Selectable Answer

Which of the following 4 functions can be achieved through ECS security group configuration?

A. allow specific IP to remote access ECS server
B. make ECS server be able to defend 15Gb/s DDOS attack
C. fix XSS vulnerability
D. assign customized IP address to ECS

Answer:

Question 27 Selectable Answer

Which service in RedHat Linux OS can be used to build network firewall functionality? Score 2

A. iptables
B. ipfirewall
C. linuxfw
D. netstat

Answer:

Question 28 Selectable Answer

Which of the following scenarios is the one that 'Server Guard' will support for brute force password hacking detection?

A. RDS remote connection
B. ECS server remote logon or inside DB remote logon
C. Windows shared directory access
D. Linux CRM application remote logon

Answer:

Question 29 Selectable Answer

Alibaba Cloud will provide hot fix to address existing vulnerabilities .
Which of the following statements is true about this 'hot fix'?

A. hot fix doesn't need to reboot physical host
B. service will not be available during the hot fix
C. hot fix means the host need to reach some temperature upper limit to be able to proceed
D. hot fix is transparent to end user

Answer:

Question 30 Selectable Answer

Which of the following items can't be set in ECS security group configuration? Score 2

A. OS type
B. network interface
C. authorization policy
D. authorization object

Answer:

Current Exam

ACA-Sec1

AliCloud
ACA Cloud Security Associate

View Full ACA-Sec1 Package