ACP Cloud Security

Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applicationsWhich of the following functions are currently provided by CloudMonitor?

• Custom firewall

• Alerting

• Site monitoring

• Cloud service monitoring

• Custom monitoring

More than one CNAME record is generated for the same domain name when Alibaba Cloud Anti-DDoS Premium Service Instance is purchased for load balancing purpose.

• True

• False

Data Risk Control feature has been integrated into Alibaba Cloud WAF. When this function is activated, a script must be embedded into the page that wishes to be protected under the corresponding domain name to check whether a client is trustworthy.

Which type of script is it?

• JavaScript

• C++

• Vbscript

• Java

When using Alibaba Cloud Anti-DDoS Service/WAF in China Mainland, you must finish ICP Filing beforehand.

• True

• False

The ScheduleKeyDeletion function lets you schedule a time to delete Key Management Service (KMS) keys.How far in the future can a key deletion event be scheduled?

• 7 days

• 30 days

• 15 days

• 60 days

User A is the system administrator of a company, who often takes business trips to Shanghai Each time when he remotely logs on to the Shanghai an alert is reported, prompting "Someone is remotely logging on to the server Please pay attention to your server security"Which of the following methods can be used to quickly and automatically resolve this issue?

• Open a ticket immediately to consult Alibaba Cloud engineers

  Log on to the Alibaba Cloud Security Center, and add a frequent logon location to the configuration item of

• Security Center.

• Ask the company leaders for help

• Call a friend, who is a famous hacker in the industry, for help.

There is a limit on the number of Customer Master Keys (CMKs) that users can create using Key Management Service (KMS), but users can raise this limit by submitting a support ticket to Alibaba Cloud.

• True

• False

A customer built his website on Alibaba Cloud- To defend against Web attacks he activated Alibaba Cloud WAF However, a week later, the customer finds that his website has suffered intrusion.Which of the following actions should he take to ensure that WAF functions correctly and enhance system security? (Number of correct answers: 4)

• Use Security Center to remove Trojans and fix vulnerabilities

• Secure other HTTP services on the ECS instance using WAF

• Configure a security group for the ECS instance.

• Check whether or not the DNS resolution results point to the WAF address

• Delete all snapshots and clear the server

Border Gateway Protocol (BGP) is mainly used for interconnection between autonomous systems (AS) on the Internet It. Controlling route transmission and selecting the best route Alibaba Cloud uses a BGP multi-line access mechanism for all its IDCs in China.Which of the followings are advantages of a BGP multi-line IDC? (Number of correct answers 2)

• Larger bandwidth

• High-speed interconnection

• Low bandwidth cost

  Elimination of access barriers between North China and South China because China is big and North China and

• South China has different telecom operators

Cross Site Script (XSS) attacks refer to a kind of attack by tampering the webpage using HTML injection to insert malicious scripts so as to control the user's browser when the user browses the webpage XSS vulnerabilities may be used for user identity stealing (particularly the administrator identity), behavior hijacking, Trojan insertion and worm spreading, and also phishing

• True

• False