Real ACP-Sec1 dumps - Real Alibaba dumps PDF in here [Dec-2021]

Realistic BraindumpsIT ACP-Sec1 Dumps PDF - 100% Passing Guarantee

Alibaba ACP-Sec1 Exam Syllabus Topics:

Topic	Details
Topic 1	Characteristic, application scenarios, competitive edges and features of Alibaba Cloud Anti-DDos and WAF
Topic 2	Core security products: basic operations and management of Anti-DDoS, Security Center, SSL Certificate, Content Moderation, Key Management Service
Topic 3	Discovering DDoS attacks, brute force password cracking attacks Security advantages of their combined solutions
Topic 4	Characteristics, application scenarios and features of Alibaba Cloud security management-related products
Topic 5	Security application solution design, such as correct understanding and handling after receiving alerts from the console, e-mails or text messages
Topic 6	Cloud computing-related product (ECS, Server Load Balancer, OSS, RDS, VPC and CDN) content
Topic 7	web SQL injections among other common security risks and taking appropriate measures for protection
Topic 8	Cloud service-related basic security protocols such as HTTP, FTP, TCP, UDP and ICMP Understanding common security risks of the above products
Topic 9	Understanding the positioning, main features, working principles and application scenarios of the above products

 

NEW QUESTION 13
When the agent of Alibaba Cloud Security Center running on a server, it normally uses less than 1% of the CPU and 10 MB of memory, which can void affecting the server's performance

• A. True
• B. False

Answer: A

 

NEW QUESTION 14
In a public cloud environment Alibaba Cloud is responsible for security of cloud computing infrastructure (such as the IDC environment, physical server O&M, and virtualization layer of cloud products). However, you still need to perform necessary security optimization measures for the Cloud products you purchased Which of the following actions do you think are safe?

• A. To reduce the communication cost, five administrators of the company use the root account to log on to the ECS instance.
• B. To enable colleagues working at home to update data, open public IP addresses for ApsaraDB for RDS instances, and allow all IP addresses to connect to the instances
• C. After buying an ECS instance, enable the security group firewall for the ECS instance through the console, and only allow a management IP address to remotely log on to the ECS instance.
• D. For easy management, change the administrator password for the ECS instance to 123456.

Answer: C

 

NEW QUESTION 15
When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?

• A. Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures
• B. This alert does not matter and can be ignored.
• C. Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert.
• D. Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance

Answer: D

 

NEW QUESTION 16
You have bought an ECS instance on Alibaba Cloud After deploying a Python environment on it, which of the following is the easiest and quickest way to monitor whether the Python process is running normally and report an alert if the process is accidentally terminated?

• A. Utilize process monitoring feature (can be found in ECS instance
• B. Log on to the ECS instance console
• C. Use site monitoring
• D. Write a script for monitoring by yourself.

Answer: A

 

NEW QUESTION 17
Alibaba Cloud WAF identifies attacks using human/robot detection, Big Data analysis, model analysis, and other related techniques. Which of the following CC attack defense modes does WAF provide to meet the protection requirements of users? (Number of correct answers 2)

• A. Attack emergency
• B. Exception
• C. Normal
• D. Threat

Answer: A,C

 

NEW QUESTION 18
What are some of the products that support integration with Alibaba Cloud's SSL Certificates Service (Number of correct answers: 3)

• A. Server Load Balancer (SLB)
• B. ApsaraDB for RDS
• C. Secure Content Distribution Network (SCDN)
• D. Content Distribution Network (CDN)

Answer: A,C,D

 

NEW QUESTION 19
Alibaba Cloud Security Center provides patch management service, where are the patches published from?

• A. Developed by Alibaba Cloud
• B. Officially published by application vendors
• C. Contributed by netizens from open-source communities
• D. Officially published by operating system vendors

Answer: C

 

NEW QUESTION 20
Content Moderation service is useful m a wide variety of scenarios. Which of the following are the *most* suited to Content Moderation's capabilities? (Number of correct answers 2)

• A. Detecting sensitive customer information such as credit card numbers in uploaded images
• B. Detecting spam posts on a forum
• C. Detecting faces in images
• D. Deleting porn on a social networking site

Answer: B,D

 

NEW QUESTION 21
Which of the following configurations is NOT a feature provided by Alibaba Cloud Web Application Firewall product?

• A. Data Leakage Prevention
• B. Crawler Detection
• C. HTTP ACL Policy
• D. Blocked Regions

Answer: D

 

NEW QUESTION 22
When applying for an SSL certificate through Alibaba Cloud's SSL Certificates Service, there is an offline review process which can take 3-5 business days or 5-7 business days depending on the type of certificate you have applied for:

• A. True
• B. False

Answer: A

 

NEW QUESTION 23
Cross Site Script (XSS) attacks refer to a kind of attack by tampering the webpage using HTML injection to insert malicious scripts so as to control the user's browser when the user browses the webpage XSS vulnerabilities may be used for user identity stealing (particularly the administrator identity), behavior hijacking, Trojan insertion and worm spreading, and also phishing

• A. True
• B. False

Answer: A

 

NEW QUESTION 24
When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.

• A. True
• B. False

Answer: A

 

NEW QUESTION 25
Before using the HTTPS protection feature in Alibaba Cloud WAF, you must upload the server certificate and private key beforehand.

• A. True
• B. False

Answer: A

 

NEW QUESTION 26
Alibaba Cloud Security Center can record source IP addresses that remotely access a server, and shield suspicious IP addresses that frequently connect to the server. During routine O&M. which of the following functions can be used to set the IP address that are commonly used by the system administrator'?

• A. Security group
• B. Valid Login IP list
• C. Webshell detection
• D. Frequent logon location management

Answer: D

 

NEW QUESTION 27
The ScheduleKeyDeletion function lets you schedule a time to delete Key Management Service (KMS) keys.
How far in the future can a key deletion event be scheduled?

• A. 15 days
• B. 60 days
• C. 7 days
• D. 30 days

Answer: A

 

NEW QUESTION 28
Clean bandwidth refers to the maximum normal clean bandwidth that can be processed by Anti-DDoS Premium instances when your business is not under attack. Make sure that the Clean bandwidth of the instance is greater than the peak value of the inbound or outbound traffic of all services connected to the Anti-DDoS Premium instances If the actual traffic volume exceeds the maximum Clean bandwidth, your business may be subject to traffic restrictions or random packet losses, and your normal business may be unavailable, slowed, or delayed for a certain period of time

• A. True
• B. False

Answer: A

 

NEW QUESTION 29
Cloud computing service security requires the joint effort of the cloud service supplier (such as Alibaba Cloud), independent software vendor (ISV), and users The failure of any party to fulfill their responsibilities may lead to security risks. Which of the following are the responsibilities of the cloud computing service users? (Number of correct answers 2)

• A. Ensure multi-channel power supply in the Cloud data center
• B. Strengthen information security management in the company to prevent sensitive information leakage
• C. Regularly change the service system password
• D. Provide security protection for physical infrastructure

Answer: B,C

 

NEW QUESTION 30
For which of the following protection scenarios is Alibaba Cloud WAF applicable? (Number of correct answers: 5)

• A. Data leakage prevention
• B. Protection against SMS refresh and service data crawling
• C. Brute force cracking protection
• D. Defense against website trojans and tampering
• E. Protection against malicious CC attacks
• F. Virtual vulnerability patches

Answer: A,C,D,E,F

 

NEW QUESTION 31
Products like ECS and Server Load Balancer it will be automatically protected by Anti-DDoS Basic service

• A. True
• B. False

Answer: A

 

NEW QUESTION 32
After opening the Task Manager in Windows, you can easily see abnormal processes whose names do not comply with English grammar or computer naming conventions or contain random strings. Which of the following processes may be abnormal? (Number of correct answers: 4)

• A. 466363.exe
• B. eeosec exe
• C. svchost exe
• D. nihao exe
• E. Ikdhpec exe
• F. RegSrvc exe

Answer: A,B,D,E

 

NEW QUESTION 33
......

Verified ACP-Sec1 dumps Q&As Latest ACP-Sec1  Download: https://www.braindumpsit.com/ACP-Sec1_real-exam.html