ACA-Sec1 Questions and Answers

Share password between different users

Botnet attack

system vulnerability is not fixed in time

Wrong security configuration

enable CDN and change anti-DDOS pro IP to CDN address

add anti-DDOS pro IP into customer firewall white list

disable original server firewall

enable SLB for original server

server is under brute force password hacking

hardware disk or memory broken

infection by Trojan Virus

application vulnerability being leveraged by hackers

Server Guard Agent will automatically scan your web pages directories and look for any

webshell file.

A change to a file in the web pages directories will trigger a scan for that file

you can log on to the Server Guard console to isolate webshell files with one click.

Server Guard will delete any suspicious webshell file immediately

My Answer: B. Other file says D

ECS

SLB

Security Group

Express Connect

HTTP must use port 80 and HTTPS must use port 443 to provide service

HTTPS is more secure than HTTP regarding the way they transfer data

Data transferred through HTTPs is under encryption

You must buy commercial CA before you setup your own web server with HTTPS service

In order to get admin password

Steal confidential information

Causes the target server unable to process legitimate requests

If the target server has no vulnerabilities, the remote attack may still succeed.

basic anti-DDOS service can detect attack traffic and migrate them automatically

basic anti-DDOS service can protect any server connect to internet

no protection upper limit to the rate of attack traffic

CC attack protection need to be turned on manually

IP address

Port

Encryption algorism

Protocol

Router Location

Ping to the server

Simulate a DDoS attack on that server

Simulate a DoS attack on the server

Check if all the patches and required antivirus software has been loaded o the server

Control Panel->Management Tool->Stop the running service

Control Panel->windows update->Stop

Create new firewall rule to stop service

Delete administrator role and related accounts

stronger defending attacks capability

elastic protection bandwidth

no upper limit to the attack traffic need to be handled

can do anti-fraud protection

can protect IDC outside Alibaba Cloud

Change 'Administrator' to some other name

With 'Server Guard' protection in Alibaba Cloud, you can set password to some easy to

remember words.

Except some necessary accounts for system management, disable or delete other useless

accounts

Always set password with highly complex combination of number, letter and other

characters

use 'remote desktop connection' for windows

use 'ssh' tool for windows

use 'remote desktop connection' for Linux

use 'ssh' tool for Linux

IPV6 has bigger route table size

IPV6 address length upper limit is 128 bits

IPV6 has more simplified header

No network switch device is needed when using IPV6 protocol to transfer data

Gpedit

Regedit

Gedit

Zedit

change'Administrator' to some other name

with'Server Guard protection In Allbaba Cloud,you can set password to some easy to

remember words.

except for some necessary accounts for system manogement,.dlsoble or delete other

seldomly used accounts

always set a complexed passwcwd using combination of numbers,letters and other

characters