QUESTION 38
When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert “ECS instance suffers brute force password cracking” will be prompted If you receive this alert, which of the following is the safest way to handle this alert?

QUESTION 39
When applying for an SSL certificate through Alibaba Cloud’s SSL Certificates Service, there is an offline review process which can take 3-5 business days or 5-7 business days depending on the type of certificate you have applied for:

QUESTION 40
What are some of the products that support integration with Alibaba Cloud’s SSL Certificates Service (Number of correct answers: 3)

QUESTION 41
A website is built using open-source software To prevent hacker attacks and fix vulnerabilities in a timely manner, the administrator of the website wants to use the patch management feature in Security Center. Which of the following statements about patch management is FALSE.

QUESTION 42
Alibaba Cloud Data Risk Control utilizes Alibaba Group’s Big Data computing capabilities and industry-leading, risk decision making engine to address fraud threats in key service processes (such as account log on, online activity, payment) and avoid financial loss Which of the following is NOT an application scenario of Data Risk Control?

QUESTION 43
If an ECS instance needs to be accessed by other applications from internet, a corresponding “port” must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?

QUESTION 44
To improve ECS instance security, the administrator does not want users on public network to check whether an ECS instance is online using the ping command. Which of the following reinforcement measures designed by the administrator is NOT feasible?

QUESTION 45
After a customer uses Alibaba Cloud Anti-DDoS Premium Service, a 502 error is prompted. Which of the followings are the possible causes of the error? (Number of correct answers 3)

QUESTION 46
Alibaba Cloud WAF is a security protection product based on Alibaba Group’s web security defense experience accumulated over more than a decade By defending against common OWASP attacks, providing patches to fix vulnerabilities, and allowing users to customize protection policies for website services, WAF can successfully safeguard the security and availability of websites and web applications. Which of the following types of security configurations does WAF provide? (Number of correct answers 3)

QUESTION 47
Alibaba Cloud CloudMonitor is a service that monitors Alibaba Cloud resources and Internet applications.
Which of the following statements about CloudMonitor is accurate’?

QUESTION 48
Alibaba Cloud’s Content Moderation service cannot detect advertising or spam content.

QUESTION 49
baba Cloud security service provides in-depth defense Which of the following services is dedicated for host security?

QUESTION 50
If you activate Alibaba Cloud Security Center on an ECS Linux instance and change the default SSH port (22) to another port, you will no longer receive SMS or email notification related to brute force password cracking

QUESTION 51
Alibaba Cloud WAF currently supports web security protection for HTTP and HTTPS. Which of the following ports are usually used for HTTP and HTTPS protocols? (Number of correct answers: 2)

QUESTION 52
You applied for an SSL certificate through Alibaba Cloud’s SSL Certificates Service During the application, you selected “Manual” at the “CSR “” step. You now want to install your certificate on a server running Apache What must you do?

QUESTION 53
Cross Site Script (XSS) attacks refer to a kind of attack by tampering the webpage using HTML injection to insert malicious scripts so as to control the user’s browser when the user browses the webpage XSS vulnerabilities may be used for user identity stealing (particularly the administrator identity), behavior hijacking, Trojan insertion and worm spreading, and also phishing

QUESTION 54
As your business grows, you begin exceeding the maximum number of requests-per-minute supported by the Content Moderation API and requests begin to fail What is the best way to resolve this issue?

QUESTION 55
After you install the Alibaba Cloud Security center agent on a non with your Alibaba Cloud account*?

QUESTION 56
When a Layer-4 forwarding rule is configured with multiple origin site IP addresses, Alibaba Cloud Anti-ODoS Premium Service will perform load balancing for Layer-4 requests using balancing algorithm

QUESTION 57
Alibaba Cloud WAF identifies attacks using human/robot detection, Big Data analysis, model analysis, and other related techniques. Which of the following CC attack defense modes does WAF provide to meet the protection requirements of users? (Number of correct answers 2)