New 2022 ACP-Sec1 Dumps for Alibaba Security Certified Exam Questions & Answer [Q18-Q35]

Rate this post

New 2022 ACP-Sec1 Dumps for Alibaba Security Certified Exam Questions and Answer

Realistic Verified ACP-Sec1 exam dumps Q&As – ACP-Sec1 Free Update

Alibaba ACP-Sec1 Exam Syllabus Topics:

Topic	Details
Topic 1	Discovering DDoS attacks, brute force password cracking attacks Security advantages of their combined solutions
Topic 2	Security application solution design, such as correct understanding and handling after receiving alerts from the console, e-mails or text messages
Topic 3	Understanding the positioning, main features, working principles and application scenarios of the above products
Topic 4	web SQL injections among other common security risks and taking appropriate measures for protection
Topic 5	Characteristic, application scenarios, competitive edges and features of Alibaba Cloud Anti-DDos and WAF
Topic 6	Cloud service-related basic security protocols such as HTTP, FTP, TCP, UDP and ICMP Understanding common security risks of the above products
Topic 7	Characteristics, application scenarios and features of Alibaba Cloud security management-related products
Topic 8	Core security products: basic operations and management of Anti-DDoS, Security Center, SSL Certificate, Content Moderation, Key Management Service

NO.18 Alibaba Cloud WAF currently supports web security protection for HTTP and HTTPS. Which of the following ports are usually used for HTTP and HTTPS protocols? (Number of correct answers: 2)

443

NO.19 When you receive a security alert from Alibaba Cloud Security Center, which of the following actions should you do?

The alert is dangerous You must immediately report it to the police

Shield the alert because it is not important

Once you receive an alert, you need to determine the specific risk and perform troubleshooting For example, change the password, or upgrade application software

There is no need to care about the alert Alibaba Cloud Security Center will handle it.

NO.20 You have helped a customer set up a content filtering solution based on Content Moderation service However, the customer is complaining that certain images are getting incorrectly flagged as pornographic content. What can you do to help fix this?

Create an “Image Library” from the Content Moderation console and add the images to the Image Library’s whitelist

Ask your customer to use different images on their site

Modify the images until Content Moderation service starts marking them as pornographic.

Open a ticket with Alibaba Cloud support, and send them a copy of the images, so that they can tune Content Moderation’s detection algorithms

NO.21 A large Internet company has services running on physical machines, as well as self-built monitoring and alert system Recently, the company wants to migrate part of the services to Alibaba Cloud and use CloudMonitor to monitor ECS instances and set alerts What should the company do to quickly interconnect CloudMonitor alerts with the self-built alert system, and handle both alerts (alerts about the physical machines and ECS instances) in self-built alert system?

Use the Event Monitoring function provided by CloudMonitor to consume alerts sent from self-built alert system

Call the API for querying data provided by CloudMonitor. regularly query data, and write a code to check whether indicators are abnormal

Call the API for obtaining messages and alerts that are sent to self-build alert system

This cannot be implemented.

NO.22 When importing key material into Key Management Service (KMS), you will be given an import token and public encryption key valid for 24 hours. The public key KMS provides must be used to encrypt your key material before upload KMS allows you to choose different public key encryption algorithms Which ones are supported? (Number of correct answers; 3)

RSAES_OAEP_SHA_1

RSAES_ECDHE_V1 _5

RSAES_OAEP_SHA_256

RSAES PKCS1 V1 5

NO.23 You applied for an SSL certificate through Alibaba Cloud’s SSL Certificates Service During the application, you selected “Manual” at the “CSR “” step. You now want to install your certificate on a server running Apache What must you do?

You must revoke your certificate and re-apply, this time choosing “Automatic” at the “CSR Generation” step. Otherwise, the SSL certificate cannot be downloaded

You can download a crt file of type “Other” from the SSL Certificates Service console, then use openssl to convert this file to pfx format for use with Apache

SSL Certificates Service doesn’t support the type of certificates needed by Apache. They cannot be used together

You can use the “generate pfx file” function built into the SSL Certificates Service to manually generate and download the pfx file needed by Apache

NO.24 More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.

True

False

NO.25 Alibaba Cloud Data Risk Control utilizes Alibaba Group’s Big Data computing capabilities and industry-leading, risk decision making engine to address fraud threats in key service processes (such as account log on, online activity, payment) and avoid financial loss Which of the following is NOT an application scenario of Data Risk Control?

Account registration

Application installation

Goods payment

Transaction rating

NO.26 If a user has multiple ECS instances on Alibaba Cloud but has no professional O&M team or is unwilling to put efforts in O&M, the user can activate Alibaba Cloud Security Center which provides security expert services like manual security checking, Trojan removing and hosted service monitoring.

True

False

NO.27 After you install the Alibaba Cloud Security center agent on a non with your Alibaba Cloud account*?

The user name and password

Your AccessKey

Your account ID

The installation verification key generated on the console

NO.28 Alibaba Cloud Anti-DDoS Premium can be used only when the origin site IP address is in Alibaba Cloud.

True

False

NO.29 Data transfer between Internet devices requires specific specifications, which are called “protocols” Among those, the invention of a certain protocol played a decisive role in the creation of the Internet. By using those protocols, tens of thousands of computers can be connected and communicate with each other What is the following protocol is not defined in OSI 7 layer model?

HTTP

TCP

UDP

SOAP

NO.30 What are some of the products that support integration with Alibaba Cloud’s SSL Certificates Service (Number of correct answers: 3)

ApsaraDB for RDS

Content Distribution Network (CDN)

Secure Content Distribution Network (SCDN)

Server Load Balancer (SLB)

NO.31 Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?

Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time

Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks

Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.

You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes

NO.32 Alibaba Cloud Anti-DDoS Premium Service can be used to protect against DDoS attacks larger than 100 Gbps. It can be used to protect both Alibaba Cloud hosts and non-Alibaba Cloud hosts

True

False

NO.33 Various profit-oriented hacker groups exist on the Internet. They control a large number of server resources and can launch network attacks against a target server at any time Among those, one type of attack is common and destructive, which completely consumes resources of the target server so that normal customers cannot connect to the server Which of the following belongs to this type of attack?

XSS attack

Webshell attack

DDoS attack

SQL injection

NO.34 A website is built using open-source software To prevent hacker attacks and fix vulnerabilities in a timely manner, the administrator of the website wants to use the patch management feature in Security Center. Which of the following statements about patch management is FALSE.

Before patches for most common Web vulnerabilities are released, the Alibaba Cloud Security O&M team will have fixed the vulnerabilities using self-developed patches

Rollback of Web vulnerabilities means to restore the original files, while rollback of Windows vulnerabilities means to uninstall the patch upgrade

Patch management can operate machines in batches in the cloud. For large-scale vulnerabilities, it supports one-key patch upgrade, which is easy and convenient

Vulnerabilities are automatically fixed Once a self-developed paten is released, it automatically fixes vulnerabilities for all customers who have enabled patch management.

NO.35 You have bought an ECS instance on Alibaba Cloud After deploying a Python environment on it, which of the following is the easiest and quickest way to monitor whether the Python process is running normally and report an alert if the process is accidentally terminated?

Use site monitoring

Log on to the ECS instance console

Utilize process monitoring feature (can be found in ECS instance

Write a script for monitoring by yourself.

Loading …

Use Real ACP-Sec1 Dumps – 100% Free ACP-Sec1 Exam Dumps: https://www.prepawaypdf.com/Alibaba/ACP-Sec1-practice-exam-dumps.html

No related posts.

Alibaba ACP-Sec1 Exam Syllabus Topics:

admin

Leave a Reply Cancel reply