Alibaba ACP-Sec1 問題集

質問 1：
When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.
A. False
B. True
正解：B

質問 2：
If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?
A. The administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports
B. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks
C. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks
D. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks
正解：B

質問 3：
To improve ECS instance security, the administrator does not want users on public network to check whether an ECS instance is online using the ping command. Which of the following reinforcement measures designed by the administrator is NOT feasible?
A. Enable a security group and only allow access from ports 80 and 25 of the public network through TCP
B. Resolve the IP address of the ECS instance to an uncommon level 4 domain name, and point the promotional domain name to the level 4 domain name through CNAME
C. Enable a security group, and reject ICMP for public network access.
D. Enable an operating system firewall for the ECS instance, and reject ICMP for public network access.
正解：B

質問 4：
In which of the following scenarios is Alibaba Cloud Security Center applicable? (Number of correct answers
3)
A. Setting up web server to provide web service to public
B. Network security protection for ad campaigns or other activities
C. Penetration testing
D. Batch server security O&M
E. Creating an ECS with generic software
正解：B,C,D

質問 5：
baba Cloud security service provides in-depth defense Which of the following services is dedicated for host security?
A. Data Risk Control
B. WAF
C. Anti-DDoS pro Service
D. Security Center
正解：C

質問 6：
When the agent of Alibaba Cloud Security Center running on a server, it normally uses less than 1% of the CPU and 10 MB of memory, which can void affecting the server's performance
A. False
B. True
正解：B

質問 7：
Users can detach the Security Center client on Alibaba Cloud ECS instances, and reinstall it later when necessary.
A. False
B. True
正解：B

質問 8：
Anti-DDoS is one of the major products of Alibaba Cloud Security service Many websites have suffered DDoS attacks of different types. Therefore, accurate understanding of DDoS attacks is critical to the website security protection. Which of the following statements about DDoS attacks is the MOST accurate?
A. The purpose of a DDoS attack is to steal confidential information
B. A DDoS attack cracks the servers logon password by means of numerous attempts
C. DDoS attacks primarily target a database
D. The main purpose of a DDoS attack is to prevent the target server from providing normal services
正解：D