|
| Alibaba: Secure Your Cloud Infrastructure (Exam) Answers |
Notice!
Always refer to the official Alibaba Documentaion for the most accurate and up-to-date information.
Attention!
If you have any questions that are not covered in this post, please feel free to leave them in the comments section below. Thank you for your engagement.
Exam Question
Single answer1.Regarding Alibaba Cloud KMS(Key Management Service) product, 'BYOK' means?
A. Bless Your Own Key
B. Bring Your Own Key
C. Block Your Own Key
D. Bound Your Own Key
B. Bring Your Own Key
C. Block Your Own Key
D. Bound Your Own Key
Single answer
2.Which of the following options is used for Alibaba Cloud account management and resource access control?
A. RAM
B. IAM
C. ARM
D. Cloud Monitor
B. IAM
C. ARM
D. Cloud Monitor
Single answer
3.Which of the following Alibaba Cloud security products can be used to prevent Bot and Crawler threats?
A. Risk Assessment
B. Content Moderation
C. Anti-bot
D. SSL Certificate
B. Content Moderation
C. Anti-bot
D. SSL Certificate
Single answer
4.Who will be responsible for security and on-cloud compliance？
A. Alibaba Cloud
B. Customers
C. System Intergrators
D. All of the above
B. Customers
C. System Intergrators
D. All of the above
Single answer
5.Which of the following option is NOT counted as a "User Account Security" concern?
A. User Authentication
B. User Authorization
C. User Audit
D. User Registration
B. User Authorization
C. User Audit
D. User Registration
Single answer
6.Which of the following can help tracking resource conifguration and detecting noncompliant configurations?
A. CloudMonitor
B. Security Center
C. Cloud Config
D. Cloud Security Scanner
B. Security Center
C. Cloud Config
D. Cloud Security Scanner
Single answer
7.Which of the following products can be used to manage security keys on Alibaba Cloud for data encryption and decryption?
A. KMS
B. SSL Certificate
C. WAF
D. Anti-DDoS
B. SSL Certificate
C. WAF
D. Anti-DDoS
Single answer
8.Which of the Anti-DDoS editions is only available outside of China mainland?
A. Anti-DDoS Basic
B. Anti-DDoS Pro
C. Anti-DDoS Premium
B. Anti-DDoS Pro
C. Anti-DDoS Premium
True/False
9.Security Center can be used to protect your ECS servers on Alibaba Cloud from 'remote unusual logon' and 'brute force password cracking' attacks.
True
False
False
True/False
10.Alibaba Cloud Anti-DDoS service supports 'Intelligent Traffic Scheduling" which can intelligently learn the service traffic baseline to accurately identify attack traffic and its characteristics.
True
False
False
True/False
11.Cloud Firewall can be used to protect your public IP addresses with internet boundary isolation and also can be used to build isolation and control between VPCs.
True
False
False
Multiple answers
12.Which of the following certificates have been obtained by Alibaba Cloud? (Number of correct answer: 4)
A. PCI DSS
B. ISO27001
C. MTCS
D. Data Protection Trustmark (DPTM)
E. ISO9001
B. ISO27001
C. MTCS
D. Data Protection Trustmark (DPTM)
E. ISO9001
Multiple answers
13.Which of the following resources can facilitate customers’ due diligence process? (Number of correct answer: 2)
A. Third Party Audit Report
B. User guide provided by Alibaba Cloud
C. Cloud Config
D. Sensitive Data Discovery & Protection (SDDP)
B. User guide provided by Alibaba Cloud
C. Cloud Config
D. Sensitive Data Discovery & Protection (SDDP)
Multiple answers
14.Which of the following functions are provided by Sensitive Data Discovery & Protection (SDDP)? (Number of correct answer: 3)
A. Sensitive Data Identification
B. Static Data Masking
C. Data Exception Detection
D. Data Automatically Modification for Security Protection
B. Static Data Masking
C. Data Exception Detection
D. Data Automatically Modification for Security Protection
Multiple answers
15.Alibaba Cloud supports 'Data-at-rest" encryption function on many products including? (Number of correct answer: 3)
A. EBS
B. OSS
C. RDS
D. VPN Gateway
B. OSS
C. RDS
D. VPN Gateway