ACA Cloud Security ACA-Sec1 Practice Questions

dumps2022-02-18T01:55:12+08:00

ACA Cloud Security ACA-Sec1 exam practice questions are the best material for you to take the test. There are 60 questions in real Alibaba Cloud ACA-Sec1 exam, and you have 90 minutes to finish the test. The requried passing score of ACA-Sec1 exam is 60. The available language is English. The registration fee is $200. Free ACA Cloud Security ACA-Sec1 practice questions are below.

Page 1 of 5

1. From which of the following attacks WAF will not provide protection?

SYN Flood

Web Server vulnerability attack

Core files unauthorized access

HTTP Flood

2. Alibaba Cloud offers different security protection plans to different tenant accounts .

Which of the following is NOT a security plan offered by Alibaba Cloud?

Password-free login

Two-factor authentication

Phone number binding

Phone or email verification for password resetting

3. Which of the following 2 security risks are not included in OWASP published 2017 Top 10 Web Application Security Risks

Cross-Site Request Forgery (CSRF)

Cross-Site Scripting (XSS)

Unvalidated Redirects and Forwards

Injection

4. Which of the following protocols will not be used for a SYN Flood attack?

UDP

TCP

IPX/SPX

AppleTalk

5. Which of the following protocols is not an application level protocol in ISO/OSI 7 layer networking model?

FTP

TCP

HTTP

SNMP

6. In Windows OS you can turn off a service through: Score 2

Control Panel->Management Tool->Stop the running service

Control Panel->windows update->Stop

Create new firewall rule to stop service

Delete administrator role and related accounts

7. Which of the following issues would not happen if ECS server is under attack by hackers?

sensitive data leak

service running on that server is not available

physical server damage

compromise the reputation of service provider on that server

8. Which protocol is a 'data link' layer protocol in ISO/OSI 7 layer network model? Score 2

ICMP

ARP

FTP

UDP

9. Which of the following statements about the supported way of MySQL DB for backup are true? (the number of correct answers: 2)

you can use 'mysqldump' do logical backup

you can copy files directly to do physical backup

you can use 'binlog' to do real time backup

you must stop accessing to DB before you do logical backup

10. CC attacks can cause serious damages .

Which of the following statements about CC attack is not correct? Score 2

CC attack will simulate real user requests

Will consume massive sever side resource

CC attack is done on network layer

The request generated by CC attack is hard to be distinguished from normal requests

Page 2 of 5

11. You are planning on hosting an eCommerce Web server. You are intent on making the server secure against all external attacks possible .

Which of the following would be the best way to test your server for its weaknesses? Choose the best answer.

Ping to the server

Simulate a DDoS attack on that server

Simulate a DoS attack on the server

Check if all the patches and required antivirus software has been loaded o the server

12. Which of the following statements is true about HTTP protocol? Score 2

HTTP is a network layer protocol

the data transmitted by this protocol is auto-encrypted

default service port is 80

HTTP protocol can't be used to transmit file

13. Which of the following items can't be set in ECS security group configuration? Score 2

OS type

network interface

authorization policy

authorization object

14. Which of following statement about 'Server Guard' Trojan scanning functionality is NOT correct? Score 2

Server Guard Agent will automatically scan your web pages directories and look for any webshell file.

A change to a file in the web pages directories will trigger a scan for that file

you can log on to the Server Guard console to isolate webshell files with one click.

Server Guard will delete any suspicious webshell file immediately My Answer,

Other file says D

15. Which of the following statements about VLAN are NOT true? (the number of correct answers: 3) Score 1

users in different VLAN can connect each other directly without pre-configuration

different VLAN means different physical location of switches

VLAN configuration can be done through an TCP/IP router device

VLAN can enhance the network security and data isolation

16. Reliable server daily operation and security management are essential for continuous service running .

Which of the following statement is NOT correct regarding to this scenario?

set easy to remember password to help administrator quickly login and solve problems

patch system timely and frequently

enable build-in OS firewall and configure it properly

disable the ports which are not providing service anymore

17. Which of the following HTTP status code does reflect that the requested page does not exist?

403

404

201

304

18. Which of the following function is provided by 'server guard' patch management service?

fix vulnerability found in open source software using Alibaba self-developed patch

detect any vulnerability before it bursts

release official patches for any exposed vulnerability

stop hacker's vulnerabilities probing

19. What are the advantages of anti-DDOS pro comparing to anti-DDOS basics service?

(the number of correct answers: 3)

stronger defending attacks capability

elastic protection bandwidth

no upper limit to the attack traffic need to be handled

can do anti-fraud protection

can protect IDC outside Alibaba Cloud

20. By default, servers in VPC can't communicate with internet. By implementing which of the following products these servers can gain the capability to communicate with internet? (the number of correct answers: 3)

Elastic Public IP

CDN

EIP + SLB

EIP + NAT Gateway

DNS service

Page 3 of 5

21. Which of the following protocol is dedicated to resolve IP and MAC addresses?

TCP

ARP

DNS

ICMP

22. Which of following statements about the possible reasons that cause web server vulnerabilities are true? (the number of correct answers: 2) Score 1

Bugs generated during common component development

Hardware configuration is not up to date

Software used or OS itself contain some logic flaw

End user didn't follow the user manual

23. Which web server is default one in Windows OS?

HTTPD

IIS

Web Daemon

Apache

24. In a regular server maintenance operation, the purpose of installing a patch on the operating system is?

To improve server resource usage

to improve system usability

to enhance system functionality

to avoid existing system vulnerabilities being used by some hackers

25. Regarding the 'Shared Security Responsibilities' on Alibaba Cloud, which of the following options are the responsibilities Cloud user need to take care of?

Data security inside ECS

Physical servers water proof

Application vulnerabilities

ECS network configuration

26. Which of the following methods CANNOT increase account security?

Strong password policies

Periodically reset the user login passwords

Adhere to the minimum authorization principle

Unite user management, permission management and resource management into a single management process

27. In order to stop the service provided through a particular port in Windows OS, which of the following methods can be used to achieve this objective? (the number of correct answers: 3)

adjust firewall rule

adjust local security policy

update OS patch

stop the service itself

stop all guest role access

28. If user is using anti-DDOS Pro service, but the original server has rule to limit access to the client IPs, which of the following actions is the most proper one to take?

enable CDN and change anti-DDOS pro IP to CDN address

add anti-DDOS pro IP into customer firewall white list

disable original server firewall

enable SLB for original server

29. Which of the following shell command can be used to check disk usage in a Linux OS ECS

Df Ch

Echo

Free Cm

Ps Ce Co

30. User A rented 2 ECS server and one RDS in Alibaba Cloud to setup his company public website.

After the web site will become available online, the security risks he/she will face will include: (the number of correct answers: 3)

physical cable is cut by someone

ECS admin password is hacked

website codes has some vulnerability

RDS DB got unknown remote logon

the disk in ECS is broken

Page 4 of 5

31. ECS cloud server is one of the service provided by Alibaba Cloud.

If it is attacked by some internet hacker, which of the following consequences such attack could cause? (the number of correct answers: 2)

Physical Server Damage

Leak of customer sensitive data

Service running on this ECS become not available

The datacenter where the ECS belongs to need to shutdown

32. Which of the following statements are true to describe a SQL attack commonly used pattern? (the number of correct answers: 3)

Adding more search request together with the original one

adding an absolute true condition to bypass original request

use incorrect SQL function

use selfmade variable

adding ";" or "--" to change the original request purpose with new request attached

33. Which of the following statements is TRUE about Anti-DDOS basics?

it can only protect servers outside of Alibaba Cloud

it is free to charge

need to turn on manually

There is no service limitation for peak traffic

34. Which of the followings are not the reasons for a DDoS attack?

Destroying of integrity

Destroying of confidentiality

Destroying of availability

Destroying of business credit

35. Which of the following products won't be a DDOS attack target?

offline backup tape devices

enterprise major website

router device

online banking system

36. When 'Server Guard' detects remote logon behavior, what information will be shown on 'Server Guard' console?

Illegal Logon!

Migrated Already!

Logon Successfully!

Remote Logon Detected!

37. Which of the following scenarios should be handled by anti-DDOS service? (the number of correct answers: 3)

Server is under syn flood attack, and is not reachable

online game service which is suffering with too many empty connections and slow connections

DNS server is under udp flood attack and got no response anymore

website is under SQL injection attack

website is under XSS attacks

38. Which of the following Alibaba Cloud products need to be considered to use if you want to build an elastic computing cluster to provide web service together and also with dynamic data and static data separately stored

ECS

SLB

RDS

OSS

KMS

39. Which of the following can be termed as the Denial of Service Attack? Choose the best answer.

A computer on your network has crashed

Your router is unable to find a destination outside of your network

Your Web server has gone into a loop trying to service a client request

You keyboard is no longer responding

40. What type of attack is likely occuring if you see a significant increase in network traffic and users complain that the web server is hung up?

MITM

DNS spoofing

Ping sweep

DoS

Page 5 of 5

41. Which of the following DDoS descriptions are correct?

In order to get admin password

Steal confidential information

Causes the target server unable to process legitimate requests

If the target server has no vulnerabilities, the remote attack may still succeed.

42. What design flaw of TCP/IP protocol does SYN flood attack use?

UDP stateless connectio

DNS 3 times hands shake

TCP 3 times hands shake

HTTP plain text transmission

43. Which of following attacks could serve as a CC attack? (the number of correct answers: 3) Score 1

SYN flood

ICMP flood

One host simulate many IP addresses

Attack through agent

Zombie network

44. What of the followings will happen if encounter DoS or DDoS attack?

Data received successfully

Delay of data reception

Slow access web resources

unauthorized access control

45. Which of the following application vulnerabilities are not as popular as others?

SQL Injection

XSS exploit

File uploading vulnerability

Kernel privilege breaking

ACA Cloud Security ACA-Sec1 Practice Questions

ACA Cloud Security ACA-Sec1 Practice Questions

Share this post

Leave a Reply Cancel reply

Related Posts