Pass Alibaba ACP Cloud Security Professional Exam in First Attempt Guaranteed Updated Dump from ITexamReview!
Pass ACP-Sec1 Exam with 82 Questions - Verified By ITexamReview
NEW QUESTION 18
Which of the following configurations is NOT a feature provided by Alibaba Cloud Web Application Firewall product?
- A. Data Leakage Prevention
- B. Crawler Detection
- C. Blocked Regions
- D. HTTP ACL Policy
Answer: C
NEW QUESTION 19
After a customer uses Alibaba Cloud Anti-DDoS Premium Service, a 502 error is prompted. Which of the followings are the possible causes of the error? (Number of correct answers 3)
- A. The Anti-DDoS Service IP range was not released As a result, the origin site is blocked.
- B. Network congestion or jitter occurred
- C. The service was configured using the IP address method instead of the CI
- D. The IP address of the origin site is exposed and suffered an attack
Answer: A,B,D
NEW QUESTION 20
Users can detach the Security Center client on Alibaba Cloud ECS instances, and reinstall it later when necessary.
- A. True
- B. False
Answer: A
NEW QUESTION 21
Content Moderation service is useful m a wide variety of scenarios. Which of the following are the *most* suited to Content Moderation's capabilities? (Number of correct answers 2)
- A. Deleting porn on a social networking site
- B. Detecting faces in images
- C. Detecting sensitive customer information such as credit card numbers in uploaded images
- D. Detecting spam posts on a forum
Answer: A,D
NEW QUESTION 22
Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications.
Which of the following statements about CloudMonitor is accurate'?
- A. To use CloudMonitor for ECS monitoring, there no agent needs to be installed in ECS.
- B. CloudMonitor can monitor websites that are not deployed in Alibaba Cloud products.
- C. CloudMonitor cannot be used through the Alibaba Cloud console
- D. CloudMonitor must be independently bought and paid for activation
Answer: B
NEW QUESTION 23
Alibaba Cloud Data Risk Control utilizes Alibaba Group's Big Data computing capabilities and industry-leading, risk decision making engine to address fraud threats in key service processes (such as account log on, online activity, payment) and avoid financial loss Which of the following is NOT an application scenario of Data Risk Control?
- A. Account registration
- B. Application installation
- C. Goods payment
- D. Transaction rating
Answer: B
NEW QUESTION 24
When applying for an SSL certificate through Alibaba Cloud's SSL Certificates Service, there is an offline review process which can take 3-5 business days or 5-7 business days depending on the type of certificate you have applied for:
- A. True
- B. False
Answer: A
NEW QUESTION 25
baba Cloud security service provides in-depth defense Which of the following services is dedicated for host security?
- A. Data Risk Control
- B. Anti-DDoS pro Service
- C. Security Center
- D. WAF
Answer: B
NEW QUESTION 26
To improve ECS instance security, the administrator does not want users on public network to check whether an ECS instance is online using the ping command. Which of the following reinforcement measures designed by the administrator is NOT feasible?
- A. Enable an operating system firewall for the ECS instance, and reject ICMP for public network access.
- B. Enable a security group, and reject ICMP for public network access.
- C. Enable a security group and only allow access from ports 80 and 25 of the public network through TCP
- D. Resolve the IP address of the ECS instance to an uncommon level 4 domain name, and point the promotional domain name to the level 4 domain name through CNAME
Answer: D
NEW QUESTION 27
When submitting requests to the Content Moderation service API, which HTTP method should you use?
- A. PUT
- B. HEAD
- C. GET
- D. POST
Answer: D
NEW QUESTION 28
Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?
- A. Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time
- B. Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.
- C. Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks
- D. You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes
Answer: B
NEW QUESTION 29
When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.
- A. True
- B. False
Answer: A
NEW QUESTION 30
Anti-DDoS is one of the major products of Alibaba Cloud Security service Many websites have suffered DDoS attacks of different types. Therefore, accurate understanding of DDoS attacks is critical to the website security protection. Which of the following statements about DDoS attacks is the MOST accurate?
- A. The purpose of a DDoS attack is to steal confidential information
- B. The main purpose of a DDoS attack is to prevent the target server from providing normal services
- C. A DDoS attack cracks the servers logon password by means of numerous attempts
- D. DDoS attacks primarily target a database
Answer: B
NEW QUESTION 31
Alibaba Cloud Security Center Agent is installed in ECS instances by default, no need to install it manually Users can detach Security Center Agent at any time they desire.
- A. False
- B. True
Answer: A
NEW QUESTION 32
The protection rules of Alibaba Cloud WAF are updated in real time after a user makes changes in WAF configuration page.
- A. True
- B. False
Answer: A
NEW QUESTION 33
After opening the Task Manager in Windows, you can easily see abnormal processes whose names do not comply with English grammar or computer naming conventions or contain random strings. Which of the following processes may be abnormal? (Number of correct answers: 4)
- A. Ikdhpec exe
- B. RegSrvc exe
- C. svchost exe
- D. nihao exe
- E. 466363.exe
- F. eeosec exe
Answer: A,D,E,F
NEW QUESTION 34
You have helped a customer set up a content filtering solution based on Content Moderation service However, the customer is complaining that certain images are getting incorrectly flagged as pornographic content. What can you do to help fix this?
- A. Create an "Image Library" from the Content Moderation console and add the images to the Image Library's whitelist
- B. Modify the images until Content Moderation service starts marking them as pornographic.
- C. Ask your customer to use different images on their site
- D. Open a ticket with Alibaba Cloud support, and send them a copy of the images, so that they can tune Content Moderation's detection algorithms
Answer: A
NEW QUESTION 35
More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.
- A. False
- B. True
Answer: A
NEW QUESTION 36
Alibaba Cloud Security's Data R.sk Control can effectively resolve junk registration, database hacking, and other service risk identification problems To use this service. you need to first collect service data. Which of the following methods can be used to collect information off Web application systems?
- A. HTML5
- B. JavaScript, SDK
- C. SDK
- D. JavaScript
Answer: D
NEW QUESTION 37
Alibaba Cloud WAF is a security protection product based on Alibaba Group's web security defense experience accumulated over more than a decade By defending against common OWASP attacks, providing patches to fix vulnerabilities, and allowing users to customize protection policies for website services, WAF can successfully safeguard the security and availability of websites and web applications. Which of the following types of security configurations does WAF provide? (Number of correct answers 3)
- A. CC protection
- B. Precision access control
- C. Web application attack protection
- D. Port access control
Answer: A,C,D
NEW QUESTION 38
Which of the following permissions is required to manually install the Alibaba Cloud Security center agent on the server?
- A. Database permission
- B. System administrator privilege
- C. Common user permission
- D. FTP service permission
Answer: B
NEW QUESTION 39
You want to buy an SSL certificate using Alibaba Cloud's SSL Certificates Service and deploy it in front of an Alibaba Cloud resource (such as Elastic Compute Service) What is the coned sequence of steps to follow?
- A. 1 Select a certificate
2 Enter request information and submit for review
3. Deploy the certificate in front of your Alibaba Cloud resources
4. Manage the certificate - B. 1 Select a certificate
2 Enter request information and submit for review
3 Manage the certificate
4 Deploy the certificate in front of your Alibaba Cloud resources - C. 1 Select a certificate
2. Deploy the certificate in front of your Alibaba Cloud resources
3. Enter request information and submit for review
4. Manage the certificate - D. 1 Enter request information and submit for review 2. Select a certificate
3 Deploy the certificate in front of your Alibaba Cloud resources
4 Manage the certificate
Answer: B
NEW QUESTION 40
Among various types of network attacks, "phishing" is one of the most common attacks. A phishing website looks exactly the same as the real website It asks visitors to login with their accounts and passwords; at the same time, record these privacy information for illegal purpose. Which of the following statements about how phishing websites are spread is FALSE?
- A. Phishing website links are sent through Facebook. Twitter and other IM(instant Messenger) applications.
- B. Banks publish phishing website links in prominent positions on their official websites
- C. Advertisements are pushed to search engines and small and medium websites, attracting users to click the phishing website links.
- D. Phishing website links are published in batches through emails forums, blogs, and SNS(Social Network Sites).
Answer: B
NEW QUESTION 41
......
Penetration testers simulate ACP-Sec1 exam: https://www.itexamreview.com/ACP-Sec1-exam-dumps.html
