ACP Cloud Security Professional (ACP-Sec1) Free Practice Test

Question 1

For which of the following protection scenarios is Alibaba Cloud WAF applicable? (Number of correct answers: 5)

A. Virtual vulnerability patches

B. Brute force cracking protection

C. Data leakage prevention

D. Protection against SMS refresh and service data crawling

E. Defense against website trojans and tampering

F. Protection against malicious CC attacks

Correct Answer: A,B,C,E,F

Question 2

If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?

A. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks

B. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks

C. The administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports

D. After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks

Correct Answer: B

Question 3

The ScheduleKeyDeletion function lets you schedule a time to delete Key Management Service (KMS) keys.
How far in the future can a key deletion event be scheduled?

A. 15 days

B. 7 days

C. 60 days

D. 30 days

Correct Answer: A

Question 4

Content Moderation service is useful m a wide variety of scenarios. Which of the following are the *most* suited to Content Moderation's capabilities? (Number of correct answers 2)

A. Detecting sensitive customer information such as credit card numbers in uploaded images

B. Deleting porn on a social networking site

C. Detecting faces in images

D. Detecting spam posts on a forum

Correct Answer: B,D

Question 5

If you install Alibaba Cloud Security Center client on a non-Alibaba Cloud server, which of the following statements allows you to check the server-related reports on the Security Center?

A. Security Center does not support non-Alibaba Cloud servers

B. Associate the Security Center client with your Alibaba Cloud official website account.

C. You need to manually install the agent on the external server, and use a verification key to associate it with your account

D. You cannot check the reports on the Alibaba Cloud console.

Correct Answer: C

Question 6

Alibaba Cloud's Content Moderation service cannot detect advertising or spam content.

A. False

B. True

Correct Answer: A

Question 7

Cross Site Script (XSS) attacks refer to a kind of attack by tampering the webpage using HTML injection to insert malicious scripts so as to control the user's browser when the user browses the webpage XSS vulnerabilities may be used for user identity stealing (particularly the administrator identity), behavior hijacking, Trojan insertion and worm spreading, and also phishing

A. False

B. True

Correct Answer: B

Question 8

Alibaba Cloud WAF identifies attacks using human/robot detection, Big Data analysis, model analysis, and other related techniques. Which of the following CC attack defense modes does WAF provide to meet the protection requirements of users? (Number of correct answers 2)

A. Normal

B. Exception

C. Threat

D. Attack emergency

Correct Answer: A,D

Question 9

Content Moderation Service is an API-based service Like many API services, it employs throttling to make sure that the service cannot be overwhelmed by a large number of simultaneous requests. What is the maximum number of requests per minute you can make against the Content Moderation API?

A. 600

B. 100

C. 300

D. 1000

Correct Answer: A

Welcome to TestSimulate

Alibaba ACP Cloud Security Professional (ACP-Sec1) Free Practice Test