ACA-Sec1問題集、Alibaba実際の試験問題

質問 1

For MySQL DB, if the records number exceeds one million in one single table, which of the following methods can help you improve querying speed?(the number of correct answers: 2) Score 1

A. setup index for this table

B. use 'count(*)' to get total record number before query

C. use 'limit N' to limit the number of possible returned records

D. use 'group by' to filter information

正解: A,D

質問 2

Which of the following products won't be a DDOS attack target?

A. router device

B. enterprise major website

C. online banking system

D. offline backup tape devices

正解: D

質問 3

Which of the following application vulnerabilities are not as popular as others?

A. SQL Injection

B. File uploading vulnerability

C. Kernel privilege breaking

D. XSS exploit

正解: C

質問 4

Which of the following logs can be accessed through ECS logs provided by Alibaba Cloud?
(the number of correct answers: 2)

A. OS system log

B. Application log

C. Hypervisor log

D. Cloud platform log

正解: A,B

質問 5

Which of these options contains the three basic target categories for a DoS or a DDoS?

A. Systems, memory, network access card

B. Networks, systems and applications

C. Network access card, applications, peripheral devices

D. Resources, printers and storage devices

正解: B

質問 6

Which of the following statements is NOT true about daily operation on server account andpassword maintenance?

A. except for some necessary accounts for system manogement,.dlsoble or delete other seldomly used accounts

B. always set a complexed passwcwd using combination of numbers,letters and other characters

C. with'Server Guard protection In Allbaba Cloud,you can set password to some easy to remember words.

D. change'Administrator' to some other name

正解: C

質問 7

Which of the following issues would not happen if ECS server is under attack by hackers?

A. compromise the reputation of service provider on that server

B. physical server damage

C. service running on that server is not available

D. sensitive data leak

正解: B

質問 8

Which of the following benefit cannot be provided by 'Server Guard'?
Score 2

A. get instant alerts after attacks are detected

B. improve the usage of system resource

C. lower the risk of sensitive data leak

D. lower the cost of security protection

正解: B

質問 9

Which of the following protocols will not be used for a SYN Flood attack?

A. IPX/SPX

B. TCP

C. AppleTalk

D. UDP

正解: A,C,D

質問 10

Inside cloud, hypervisor vulnerability could cause the following possible consequences: (the number of correct answers: 3)

A. Hacker can access host server directly

B. One client host can access another client's data

C. User service become unavailable

D. Incorrect client resource usage calculating

正解: A,B,C

Alibaba ACA Cloud Security Certification - ACA-Sec1 模擬練習