Question 1

Which of the following services can be protected by the Alibaba Cloud Security Center's anti-brute force password cracking function? (Number of answers 3)

A. Windows remote desktop service (RDP) Linux remote control service (SSH)
B. Web service (HTTP)
C. MySQL database service SQLServer database service
D. File transfer service (FTP)

Question 2

When users log on to ECS instances through SSH or remote desktop from public Internet, Alibaba Cloud Security Center will monitor the log on behaviors

If an IP address uses incorrect password to log on to an ECS instance for too many times, an alert "ECS instance suffers brute force password cracking" will be prompted If you receive this alert, which of the following is the safest way to handle this alert?

A. This alert does not matter and can be ignored.
B. Inform all users on the service platform of changing their passwords, and eliminate simple passwords using technical measures
C. Log on immediately to the ECS instance and check the logon logs If no abnormal logon success record is found ignore this alert.
D. Update the system user password immediately for the ECS instance, and enable the security group firewall to allow only specified IP addresses to connect to the ECS instance

Latest Alibaba ACP-Sec1 Practice Questions BY Hickman

Other Popular Alibaba Exams