ACP-SEC1 Online Practice Questions and Answers

More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.

A. True

B. False

There is a limit on the number of Customer Master Keys (CMKs) that users can create using Key Management Service (KMS), but users can raise this limit by submitting a support ticket to Alibaba Cloud.

A. True

B. False

You have set an alert policy for the disk usage of an ECS instance by using Alibaba Cloud CloudMonitor Each measurement cycle lasts for 5 minutes, during which the average disk usage is measured If the average disk usage exceeds 80% for five consecutive measurement cycles, an alert will be reported After your average disk usage exceeds 80%, how long will it take to receive an alert with the best case scenario?

A. 30 minutes

B. 0 minutes

C. 40 minutes

D. 20 minutes

Alibaba Cloud Data Risk Control utilizes Alibaba Group's Big Data computing capabilities and industry-leading, risk decision making engine to address fraud threats in key service processes (such as account log on, online activity, payment) and avoid financial loss.

Which of the following is NOT an application scenario of Data Risk Control?

A. Account registration

B. Application installation

C. Goods payment

D. Transaction rating

If you activate Alibaba Cloud Security Center on an ECS Linux instance and change the default SSH port

(22)

to another port, you will no longer receive SMS or email notification related to brute force password cracking.

A.

True

B.

False

Content Moderation service is useful m a wide variety of scenarios. Which of the following are the *most* suited to Content Moderation's capabilities? (Number of correct answers 2)

A. Deleting porn on a social networking site

B. Detecting spam posts on a forum

C. Detecting faces in images

D. Detecting sensitive customer information such as credit card numbers in uploaded images

Alibaba Cloud Anti-DDoS Premium Service can be used to protect against DDoS attacks larger than 100 Gbps. It can be used to protect both Alibaba Cloud hosts and non-Alibaba Cloud hosts.

A. True

B. False

Baba Cloud security service provides in-depth defense. Which of the following services is dedicated for host security?

A. Anti-DDoS pro Service

B. WAF

C. Security Center

D. Data Risk Control

When submitting requests to the Content Moderation service API, which HTTP method should you use?

A. HEAD

B. PUT

C. GET

D. POST

Alibaba Cloud Ant.-DDoS Premium Service is an advanced DDoS protection product It can defend against layer 4 and layer 7 attacks. Which of the following statements about Alibaba Cloud Anti-DDoS Premium Service is FALSE?

A. Anti-DDoS Premium Service provides precise traffic reports and attack details in real time to keep you informed of the current service details on time

B. Anti-DDoS Premium Service defends against various DDoS attacks, including but not limited to ICMP flood, UDP flood, TCP flood. SYN flood, and ACK flood attacks

C. Anti-DDoS Premium Service supports 2 billing modes: Unlimited and Insurance.

D. You can adjust the anti-DDoS elastic protection threshold to a higher level at any time, with the service interruption period no longer than 3 minutes

When the agent of Alibaba Cloud Security Center running on a server, it normally uses less than 1% of the CPU and 10 MB of memory, which can void affecting the server's performance

A. True

B. False

Which of the following configurations is NOT a feature provided by Alibaba Cloud Web Application Firewall product?

A. Blocked Regions

B. HTTP ACL Policy

C. Data Leakage Prevention

D. Crawler Detection

Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications. Which of the following statements about CloudMonitor is accurate'?

A. CloudMonitor cannot be used through the Alibaba Cloud console

B. CloudMonitor must be independently bought and paid for activation

C. CloudMonitor can monitor websites that are not deployed in Alibaba Cloud products.

D. To use CloudMonitor for ECS monitoring, there no agent needs to be installed in ECS.

What are some of the products that support integration with Alibaba Cloud's SSL Certificates Service? (Number of correct answers: 3)

A. ApsaraDB for RDS

B. Content Distribution Network (CDN)

C. Secure Content Distribution Network (SCDN)

D. Server Load Balancer (SLB)

You applied for an SSL certificate through Alibaba Cloud's SSL Certificates Service During the application,

you selected "Manual" at the "CSR "" step. You now want to install your certificate on a server running

Apache.

What must you do?

A. You must revoke your certificate and re-apply, this time choosing "Automatic" at the "CSR Generation" step. Otherwise, the SSL certificate cannot be downloaded

B. You can download a crt file of type "Other" from the SSL Certificates Service console, then use openssl to convert this file to pfx format for use with Apache

C. SSL Certificates Service doesn't support the type of certificates needed by Apache. They cannot be used together

D. You can use the "generate pfx file" function built into the SSL Certificates Service to manually generate and download the pfx file needed by Apache