ACP-Sec1 무료 덤프문제 온라인 액세스

If you activate Alibaba Cloud Security Center on an ECS Linux instance and change the default SSH port (22) to another port, you will no longer receive SMS or email notification related to brute force password cracking

• A.False
• B.True

Which of the following services can be protected by the Alibaba Cloud Security Center's anti-brute force password cracking function? (Number of answers 3)

• A.Windows remote desktop service (RDP) Linux remote control service (SSH)
• B.MySQL database service SQLServer database service
• C.File transfer service (FTP)
• D.Web service (HTTP)

Cross Site Script (XSS) attacks refer to a kind of attack by tampering the webpage using HTML injection to insert malicious scripts so as to control the user's browser when the user browses the webpage XSS vulnerabilities may be used for user identity stealing (particularly the administrator identity), behavior hijacking, Trojan insertion and worm spreading, and also phishing

• A.False
• B.True

Alibaba Cloud Anti-DDoS Premium Service can be used to protect against DDoS attacks larger than 100 Gbps. It can be used to protect both Alibaba Cloud hosts and non-Alibaba Cloud hosts

• A.False
• B.True

When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?

• A.This alert does not matter and can be ignored.
• B.Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures
• C.Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance
• D.Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert.