Prepare Top Alibaba ACA-Sec1 Exam Study Guide Practice Questions Edition [Q57-Q72]

Prepare Top Alibaba ACA-Sec1 Exam Study Guide Practice Questions Edition

Go to ACA-Sec1 Questions - Try ACA-Sec1 dumps pdf 

NEW QUESTION 57
Which of the following scenarios can be considered as business fraud? (the number of correct answers: 2)

• A. data leak because of data transmission with plain text
• B. page content including some porn pictures
• C. massive accounts registration for new user benefits gain
• D. post massive comments with bots to some e-commerce website

Answer: C,D

 

NEW QUESTION 58
By default, servers in VPC can't communicate with internet. By implementing which of the following products these servers can gain the capability to communicate with internet? (the number of correct answers: 3)

• A. DNS service
• B. EIP + NAT Gateway
• C. CDN
• D. Elastic Public IP
• E. EIP + SLB

Answer: B,D,E

 

NEW QUESTION 59
What is the correct action sequence of WAF protection strategy: (1) CC detection (2) Web application attack detection (3) Access control Score 2

• A. 0
• B. 1
• C. 2
• D. 3

Answer: D

 

NEW QUESTION 60
Customer who bought ECS server doesn't need to worry about :

• A. Cloud infrastructure security
• B. ECS security group setting
• C. OS vulnerability inside ECS
• D. Web service security inside ECS

Answer: A

 

NEW QUESTION 61
A DoS attack that sends a flood of synchronization (SYN) requests and never sends the final acknowledgement (ACK) is typically known as which of the following?

• A. Ping Flood
• B. Smurf
• C. Fraggle
• D. SYN flood

Answer: D

 

NEW QUESTION 62
Which of the following options does not belong to 5 key elements of network communication?

• A. Encryption Algorism
• B. Source IP
• C. Destination IP
• D. Communication Protocol

Answer: A

 

NEW QUESTION 63
Which of the following options is the top 1 web application security risk based on OWASP 2017 report?

• A. XSS Attack
• B. Server Information Theft
• C. SQL Injection
• D. Code Execution

Answer: C

 

NEW QUESTION 64
Which of following statement about 'Server Guard' Trojan scanning functionality is NOT correct?
Score 2

• A. you can log on to the Server Guard console to isolate webshell files with one click.
• B. Server Guard will delete any suspicious webshell file immediately
  My
• C. A change to a file in the web pages directories will trigger a scan for that file
• D. Server Guard Agent will automatically scan your web pages directories and look for any webshell file.

Answer: B

 

NEW QUESTION 65
Which web server is default one in Windows OS?

• A. HTTPD
• B. IIS
• C. Apache
• D. Web Daemon

Answer: B

 

NEW QUESTION 66
Which of the following functions can be provided by Alibaba Cloud Server Guard product?(the number of correct answers: 3)

• A. suspicious remote login detection and warning
• B. anti SQL injection
• C. brute Force password hacking detection and defense
• D. security vulnerability scanning and patching
• E. anti-ddos

Answer: A,C,D

 

NEW QUESTION 67
Which of the following 2 security risks are not included in OWASP published 2017 Top 10 Web Application Security Risks

• A. Injection
• B. Cross-Site Request Forgery(CSRF)
• C. Cross-Site Scripting(XSS)
• D. Unvalidated Redirects and Forwards

Answer: B,D

 

NEW QUESTION 68
Which of the following 4 functions can be achieved through ECS security group configuration?

• A. make ECS server be able to defend 15Gb/s DDOS attack
• B. allow specific IP to remote access ECS server
• C. assign customized IP address to ECS
• D. fix XSS vulnerability

Answer: B

 

NEW QUESTION 69
In Windows OS you can turn off a service through: Score 2

• A. Create new firewall rule to stop service
• B. Control Panel->Management Tool->Stop the running service
• C. Control Panel->windows update->Stop
• D. Delete administrator role and related accounts

Answer: B

 

NEW QUESTION 70
CC customized protection rule supports you to define customized configuration setting.
Which of following items can be self-defined? (the number of correct answers: 3)

• A. Target IP
• B. How frequently the page is visited by one single source IP
• C. Source IP
• D. How long the detection should last
• E. URI

Answer: B,D,E

 

NEW QUESTION 71
Which of the following statements about 'webshell' detection feature of WAF is NOT true?

• A. there is a switch need to be turned on first
• B. If you changed some page content, you can use 'cache update' button to manually update the cache
• C. cache will be enabled only after you turn on the protection switch
• D. It will totally block any file to be able to upload to the web server

Answer: D

 

NEW QUESTION 72
......

Alibaba ACA-Sec1 Exam Syllabus Topics:

Topic	Details
Topic 1	Familiar with operations of Alibaba Cloud Security related products
Topic 2	Understanding of the concepts of Alibaba Cloud Security related products
Topic 3	Aware of main application scenarios of Alibaba Cloud Security related products and know each of these products’ special usage scenario
Topic 4	Able to discover and resolve common issues emerged during the use of Alibaba Cloud Security related products
Topic 5	Activating, creating, configuring, starting and stopping and disabling a service
Topic 6	Virtualization, storage and networking Familiar with operation on Linux and Windows operating system and be able to configure network and storage related system commands
Topic 7	Knowledge of network security, such as firewall policy, key encryption, access control, network security, and network attack and protection methodologies
Topic 8	Familiar with the concepts and related knowledge of Cloud Computing
Topic 9	Familiar with features of Alibaba Cloud Security related products and key product implementation principles
Topic 10	Familiar with common network protocols such as HTTP, FTP, TCP, UDP and ICMP

 

Free Alibaba Security ACA-Sec1 Exam Question: https://www.actual4cert.com/ACA-Sec1-real-questions.html