ACA-Sec1 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
If your company's official website is tampered, the consequence of such attack could NOT be:

A.Website is used for some illegal attempts
B.Public image or reputation of your company is damaged
C.Business is impacted
D.Physical server is damaged

正解:

Question No : 2
Which of the following statements is the possible reason that might lead to system vulnerabilities?

A.software logic flaw or mistakes made during software development cycle
B.hardware devices are not up to date
C.system administrator didn't follow the operation manual exactly
D.The proprietary software that is safer than open source one should be installed

正解:

Question No : 3
Which command in RedHat Linux shell can be used to check disk usage?

A.ls
B.df
C.diskUsage
D.diskSpace

正解:

Question No : 4
Which of the following functions does not belong to what WAF can provide?

A.DB encryption
B.SQL injection detection
C.XSS attack detection
D.unauthorized resource access blocking

正解:

Question No : 5
In the ISO/OSI 7 layers networking model, which of the following functions are provided for the 'network layer'? (the number of correct answers: 2)

A.Routing
B.congestion handling
C.end to end reliable and transparent data transition
D.physical connection

正解:

Question No : 6
Which of the following application vulnerabilities are not as popular as others?

A.SQL Injection
B.XSS exploit
C.File uploading vulnerability
D.Kernel privilege breaking

正解:

Question No : 7
What of the followings will happen if encounter DoS or DDoS attack?

A.Data received successfully
B.Delay of data reception
C.Slow access web resources
D.unauthorized access control

正解:

Question No : 8
Which of following attacks could serve as a CC attack? (the number of correct answers: 3) Score 1

A.SYN flood
B.ICMP flood
C.One host simulate many IP addresses
D.Attack through agent
E.Zombie network

正解:

Question No : 9
What design flaw of TCP/IP protocol does SYN flood attack use?

A.UDP stateless connectio
B.DNS 3 times hands shake
C.TCP 3 times hands shake
D.HTTP plain text transmission

正解:

Question No : 10
Which of the following DDoS descriptions are correct?

A.In order to get admin password
B.Steal confidential information
C.Causes the target server unable to process legitimate requests
D.If the target server has no vulnerabilities, the remote attack may still succeed.

正解:

Question No : 11
What type of attack is likely occuring if you see a significant increase in network traffic and users complain that the web server is hung up?

A.MITM
B.DNS spoofing
C.Ping sweep
D.DoS

正解:

Question No : 12
Which of the following can be termed as the Denial of Service Attack? Choose the best answer.

A.A computer on your network has crashed
B.Your router is unable to find a destination outside of your network
C.Your Web server has gone into a loop trying to service a client request
D.You keyboard is no longer responding

正解:

Question No : 13
Which of the following Alibaba Cloud products need to be considered to use if you want to build an elastic computing cluster to provide web service together and also with dynamic data and static data separately stored

A.ECS
B.SLB
C.RDS
D.OSS
E.KMS

正解:

Question No : 14
Which of the following scenarios should be handled by anti-DDOS service? (the number of correct answers: 3)

A.Server is under syn flood attack, and is not reachable
B.online game service which is suffering with too many empty connections and slow connections
C.DNS server is under udp flood attack and got no response anymore
D.website is under SQL injection attack
E.website is under XSS attacks

正解:

Question No : 15
When 'Server Guard' detects remote logon behavior, what information will be shown on 'Server Guard' console?

A.Illegal Logon!
B.Migrated Already!
C.Logon Successfully!
D.Remote Logon Detected!

正解:

AliCloud ACA-Sec1 問題練習