Question 1

To improve system security and protect the system from DDoS attacks, you can use Alibaba Cloud Anti-DDoS Premium Service. Which of the following products can be used together with Alibaba Cloud Anti-DDoS Service to improve the system access capabilities? (Number of correct answers 3)

Options :

A : Server Load Balancer

B : CDN

C : WAF

D : RDS

Answer: A,B,C

Question 2

To improve ECS instance security, the administrator does not want users on public network to check whether an ECS instance is online using the ping command. Which of the following reinforcement measures designed by the administrator is NOT feasible?

Options :

A : Resolve the IP address of the ECS instance to an uncommon level 4 domain name, and point the promotional domain name to the level 4 domain name through CNAME

B : Enable a security group and only allow access from ports 80 and 25 of the public network through TCP

C : Enable a security group, and reject ICMP for public network access.

D : Enable an operating system firewall for the ECS instance, and reject ICMP for public network access.

Answer: A

Question 3

When you receive a security alert from Alibaba Cloud Security Center, which of the following actions should you do?

Options :

A : The alert is dangerous You must immediately report it to the police

B : Shield the alert because it is not important

C : Once you receive an alert, you need to determine the specific risk and perform troubleshooting For example, change the password, or upgrade application software

D : There is no need to care about the alert Alibaba Cloud Security Center will handle it.

Answer: C

Question 4

Alibaba Cloud Anti-DDoS Premium Service can be used to protect against DDoS attacks larger than 100 Gbps. It can be used to protect both Alibaba Cloud hosts and non-Alibaba Cloud hosts

Options :

A : True

B : False

Answer: A

Question 5

Which of the following features are available in Alibaba Cloud Anti-DDoS Premium product? (Number of correct answers: 3)

Options :

A : SQL injection Attack blocking

B : Web application layer DDoS protection

C : Transport layer DDoS protection

D : Malformed packets filtering

Answer: B,C,D

Higher Test Marks with Free Online ACP-Sec1 Exam Practice

Buying Options: