Oct-2021 Latest ExamsTorrent ACA-Sec1 Exam Dumps with PDF and Exam Engine Free Updated Today!
Following are some new ACA-Sec1 Real Exam Questions!
NEW QUESTION 14
For internet communication, to setup the connection and data transition between source and destination, which of the following information you will need? (the number of correct answers: 3) Score 1
- A. Router Location
- B. Port
- C. Encryption algorism
- D. IP address
- E. Protocol
Answer: D,E
NEW QUESTION 15
Which of the following methods can't be used to prevent SQL injection attack?
- A. Warning message for abnormal input
- B. SQL precompiling and variable binding
- C. Strict input check
- D. Use secured function call
Answer: A
NEW QUESTION 16
Which of the following service may under anti-DDOS attack?(the number of correct answers:
3)
Score 1
- A. government website
- B. any device internet reachable
- C. public DNS service
- D. offline servers
- E. servers in VPC only configured with private network
Answer: A,B,C
NEW QUESTION 17
You configure a computer to act as a zombie set in order to attack a web server on a specific date.
What would this contaminated computer be part of?
- A. The computer is part of a man-in-the-middle attack
- B. The computer is part of a DDoS attack
- C. The computer is part of a TCP/IP hijacking
- D. The computer is part of a spoofing attack
Answer: B
NEW QUESTION 18
Which of the following statements is TRUE about Anti-DDOS basics?
- A. it can only protect servers outside of Alibaba Cloud
- B. need to turn on manually
- C. it is free to charge
- D. There is no service limitation for peak traffic
Answer: C
NEW QUESTION 19
Which of following attacks could serve as a CC attack? (the number of correct answers: 3) Score 1
- A. Zombie network
- B. Attack through agent
- C. ICMP flood
- D. SYN flood
- E. One host simulate many IP addresses
Answer: A,B,E
NEW QUESTION 20
Which of following statements about the possible reasons that cause web server vulnerabilities are true? (the number of correct answers: 2) Score 1
- A. Bugs generated during common component development
- B. End user didn't follow the user manual
- C. Hardware configuration is not up to date
- D. Software used or OS itself contain some logic flaw
Answer: A,D
NEW QUESTION 21
Which of the following statements are true about the difference between HTTP and HTTPS
? (the number of correct answers: 2)
- A. Data transferred through HTTPs is under encryption
- B. HTTP must use port 80 and HTTPS must use port 443 to provide service
- C. HTTPS is more secure than HTTP regarding the way they transfer data
- D. You must buy commercial CA before you setup your own web server with HTTPS service
Answer: A,C
NEW QUESTION 22
Which of the following protection rules are provided by WAF to better protect from CC attack? (the number of correct answers: 2)
- A. Loose
- B. Emergency
- C. Normal
- D. Strict
Answer: A,D
NEW QUESTION 23
Which of the following statements is true about HTTP protocol?
Score 2
- A. default service port is 80
- B. the data transmitted by this protocol is auto-encrypted
- C. HTTP is a network layer protocol
- D. HTTP protocol can't be used to transmit file
Answer: A
NEW QUESTION 24
In the Alibaba Cloud, which services can satisfy client user identity management requirements?
- A. Resource Access Management (RAM)
- B. Security group
- C. Server Guard
- D. Situational awareness
Answer: A
NEW QUESTION 25
What are the advantages of anti-DDOS pro comparing to anti-DDOS basics service?
(the number of correct answers: 3)
- A. can protect IDC outside Alibaba Cloud
- B. no upper limit to the attack traffic need to be handled
- C. elastic protection bandwidth
- D. can do anti-fraud protection
- E. stronger defending attacks capability
Answer: A,C,E
NEW QUESTION 26
After using WAF, if you find there are many user input data in the network traffic, you should apply:
- A. Strict protection policy
- B. Normal protection policy
- C. Loose protection policy
- D. Progression protection policy
Answer: A
NEW QUESTION 27
Which of the following statements are true for how to login to different ECS operating system? (the number of correct answers: 2) Score 1
- A. use 'remote desktop connection' for windows
- B. use 'ssh' tool for Linux
- C. use 'remote desktop connection' for Linux
- D. use 'ssh' tool for windows
Answer: A,B
NEW QUESTION 28
In Windows OS you can turn off a service through: Score 2
- A. Create new firewall rule to stop service
- B. Delete administrator role and related accounts
- C. Control Panel->windows update->Stop
- D. Control Panel->Management Tool->Stop the running service
Answer: D
NEW QUESTION 29
If your company has a lot of employees who would try to simultaneously access ECS server protected by 'Server Guard' using your company's intranet, the 'Sever Guard' may mistakenly identify those access requests as attacks. Which of the following methods is the best way to solve this problem? Score 2
- A. set a highly complexed administrator password
- B. add those IPs which need to access ECS server into 'Server Guard' logon white list
- C. change the rule of security group to unblock all company internal ips
- D. ask employees to access that ECS server not very frequently
Answer: B
NEW QUESTION 30
Which of the following scenarios can be considered as business fraud? (the number of correct answers: 2)
- A. post massive comments with bots to some e-commerce website
- B. massive accounts registration for new user benefits gain
- C. data leak because of data transmission with plain text
- D. page content including some porn pictures
Answer: A,B
NEW QUESTION 31
Which of the following statements about the supported way of MySQL DB for backup are true?(the number of correct answers: 2)
- A. you can copy files directly to do physical backup
- B. you can use 'mysqldump' do logical backup
- C. you can use 'binlog' to do real time backup
- D. you must stop accessing to DB before you do logical backup
Answer: A,B
NEW QUESTION 32
Which of the following options does not belong to 5 key elements of network communication?
- A. Source IP
- B. Destination IP
- C. Communication Protocol
- D. Encryption Algorism
Answer: D
NEW QUESTION 33
Which of the following statements is NOT true about daily operation on server account andpassword maintenance?
- A. except for some necessary accounts for system manogement,.dlsoble or delete other seldomly used accounts
- B. always set a complexed passwcwd using combination of numbers,letters and other characters
- C. change'Administrator' to some other name
- D. with'Server Guard protection In Allbaba Cloud,you can set password to some easy to remember words.
Answer: D
NEW QUESTION 34
......
Resources From:
- 2021 Latest ExamsTorrent ACA-Sec1 Exam Dumps (PDF & Exam Engine) Free Share: https://www.examstorrent.com/ACA-Sec1-exam-dumps-torrent.html
Free Resources from ExamsTorrent, We Devoted to Helping You 100% Pass All Exams!