Cloud Security Quiz

1. Regarding Alibaba Cloud’s data security protection, which of the following can satisfy data backup and disaster recovery requirements?

Alibaba Cloud Certificates

ECS snapshot

ApsaraDB Encrypted Storage

HTTPDNS

2. Which of the folllowing option is not the function provided by VPC?

Support various network connections

Accelerate the network access speed

Security isolation

Customized network configuration

3. Which of the following methods CANNOT increase account security?

Strong password policies

Adhere to the minimum authorization principle

Periodically reset the user login passwords

Unite user management, permission management and resource management into a single management process

4. If an enterprise chooses the “All In One” deployment structure, which of the following security issues need NOT be considered?

Network attacks

Application access attacks

Data transmission security

Log-in security

5. Which of the following Alibaba Cloud products need to be considered to use if you want to build an elastic computing cluster to provide web service together and also with dynamic data and static data separately stored? (Number of Correct Answers: 4)

ECS

OSS

RDS

KMS

slb

6. Anti-DDoS is one of the major Alibaba Cloud Security products. Many websites have experienced different types of DDoS attacks, an accurate understanding of DDoS is crucial to protect websites. Which of the following descriptions about DDoS attacks is the most accurate one?

The purpose of a DDoS attack is to steal confidential information.

The main target for DDoS attacks are databases.

DDoS attacks will try to crack passwords through a large number of attempts.

The main purpose of a DDoS attack is to make the target server unable to provide service normally, which why it is one of the most difficult network attacks to defend.

7. Which of the following descriptions of the shared responsibilities security model is CORRECT?

After beginning to use cloud service, the user and the cloud service provider will be jointly responsible for cloud security, with each responsible for different layers of security.

After beginning to use cloud service, users only need to pay attention to the security of their own apps and data. All other security will be the responsibility of the cloud service provider.

After beginning to use cloud service, the cloud service provider will become responsible for all of the user’s security.

After beginning to use cloud service, users must still take care of physical and environmental security.

8. Cloud Monitor provides monitoring service to Alibaba Cloud resources and internet applications. Which of the following statements is correct:

Cloud Monitor also supports monitoring websites that are not deployed on Alibaba Cloud

Users need to purchase cloudmonitor service separately before use

Users can not use Cloud Monitor through console

Cloud Monitor does not support monitoring websites not deployed on Alibaba Cloud

9. IT system risk management should be considered from a variety of different angles. Which of the following is a description of device and computing security?

Includes intrusion prevention, malicious code prevention, identity authentication, access control, central management and control, and security auditing.

Includes security auditing, data integrity, and confidentiality.

Includes PC room power supply, temperature and humidity control, and prevention of wind, rain, and lightning.

Includes network architecture, boundary protection, access control, intrusion prevention, and communication encryption.

10. Regarding the ‘Shared Security Responsibilities’ on Alibaba Cloud, which of the following options are the responsibilities Cloud user need to take care of? (Number of Correct Answers: 3)

Physical servers water proof

Application vulnerabilities

Data security inside ECS

ECS network configuration

Share this:

Like this: