Practice ACA-Sec1 Exam Online

Question 1

A DoS attack that sends a flood of synchronization (SYN) requests and never sends the final

acknowledgement (ACK) is typically known as which of the following?

A : Smurf

B : Ping Flood

C :

D : SYN flood

Answer: D

Question 2

Which of the following statements is NOT true about web application security protection best practices?

A : enforce security management to any public service

B : keep installing official released patches will be good enough

C : keep monitoring system processes , performance and status

D : always scan input by user through web application

Answer: B

Question 3

Which of the following scenarios can be considered as business fraud? (the number of

correct answers: 2)

A : massive accounts registration for new user benefits gain

B : data leak because of data transmission with plain text

C : post massive comments with bots to some e-commerce website

D : page content including some porn pictures

Answer: A,C

Question 4

May, 2017. New blackmail virus WannaCry burst globally. This virus leveraged

Windows OS opened port 445 to initiate the attack, so the quickest way to prevent this kind

of attack is?

A : Change 'Administrator' to some other name

B :

With 'Server Guard' protection in Alibaba Cloud, you can set password to some easy to

remember words.

C :

Except some necessary accounts for system management, disable or delete other useless

accounts

D :

Always set password with highly complex combination of number, letter and other

characters

Answer: C

Question 5

When 'Server Guard' detects remote logon behavior, what information will be

shown on 'Server Guard' console?

A : Illegal Logon!

B : Migrated Already!

C : Logon Successfully!

D : Remote Logon Detected!

Answer: D

Name:	ACA Cloud Security Certification
Exam Code:	ACA-Sec1
Certification:	Alibaba Cloud Certified Associate
Vendor:	Alibaba
Total Questions:	147
Last Updated:	Apr 24, 2024

Alibaba ACA-Sec1