Free Alibaba ACP-Sec1 Exam Questions

Become Alibaba Certified with updated ACP-Sec1 exam questions and correct answers

Page: 1 / 17

Total 82 Questions | Updated On: Jun 06, 2025

Add To Cart

Question 1

To improve system security and protect the system from DDoS attacks, you can use Alibaba Cloud Anti-DDoS Premium Service. Which of the following products can be used together with Alibaba Cloud Anti-DDoS Service to improve the system access capabilities? (Number of correct answers 3)

A : rver Load Balancer

B : N

C : F

D :

Answer: A,B,C

Question 2

A large Internet company has services running on physical machines, as well as self-built monitoring and alert system Recently, the company wants to migrate part of the services to Alibaba Cloud and use CloudMonitor to monitor ECS instances and set alerts

What should the company do to quickly interconnect CloudMonitor alerts with the self-built alert system, and handle both alerts (alerts about the physical machines and ECS instances) in self-built alert system?

A : the Event Monitoring function provided by CloudMonitor to consume alerts sent from self-built alert system

B : ll the API for querying data provided by CloudMonitor. regularly query data, and write a code to check whether indicators are abnormal

C : ll the API for obtaining messages and alerts that are sent to self-build alert system

D : is cannot be implemented.

Answer: B

Question 3

When you receive a security alert from Alibaba Cloud Security Center, which of the following actions should you do?

A : alert is dangerous You must immediately report it to the police

B : ield the alert because it is not important

C : ce you receive an alert, you need to determine the specific risk and perform troubleshooting For example, change the password, or upgrade application software

D : ere is no need to care about the alert Alibaba Cloud Security Center will handle it.

Answer: C

Question 4

To improve ECS instance security, the administrator does not want users on public network to check whether an ECS instance is online using the ping command. Which of the following reinforcement measures designed by the administrator is NOT feasible?

A : olve the IP address of the ECS instance to an uncommon level 4 domain name, and point the promotional domain name to the level 4 domain name through CNAME

B : able a security group and only allow access from ports 80 and 25 of the public network through TCP

C : able a security group, and reject ICMP for public network access.

D : able an operating system firewall for the ECS instance, and reject ICMP for public network access.

Answer: A

Question 5

The protection rules of Alibaba Cloud WAF are updated in real time after a user makes changes in WAF configuration page.

A : ue

B : lse

Answer: A

Page: 1 / 17

Total 82 Questions | Updated On: Jun 06, 2025

Add To Cart