Question No. 1

Which of the following statements about cloud security shared responsibilities model are true? (the

number of correct answers: 2)

Afor users who is using IAAS service, they should be responsible for their business system which is
on top of cloud infrastructure

Bcloud service provider should guarantee the security of all physical infrastructure

Cthe damage caused by attacks leveraging security vulnerability in customers' application server
should be charged to cloud service provider

Dcloud user should also take care of some of the hardware maintenance and operation work

Show Answer

Correct Answer: C, D

Question No. 2

Which of the following statements about the supported way of MySQL DB for backup are

true?(the number of correct answers: 2)

Ayou can use 'mysqldump' do logical backup

Byou can copy files directly to do physical backup

Cyou can use 'binlog' to do real time backup

Dyou must stop accessing to DB before you do logical backup

Show Answer

Correct Answer: A, B

Question No. 3

Which of the following methods CANNOT increase account security?

AStrong password policies

BPeriodically reset the user login passwords

CAdhere to the minimum authorization principle

DUnite user management, permission management and resource management into a single
management process

Show Answer

Correct Answer: D

Question No. 4

Which of the following security vulnerability is not a 'Server Side' security issue?

ASQL injection

BSystem Command Execution vulnerability

CCSRF(cross site request fraud)vulnerability

DFile uploading vulnerability

Show Answer

Correct Answer: C

Question No. 5

In Linux OS, if access control to a file is shown as '-rwxrw-r--' in shell command, which of the

following statements are true?

Score 2

AThis file is a text file

BThe access privilege of this user group is read only

CThe owner of this file has read/write/execution privilege to this file

DOther users (outside of this user group) can execute this file

Show Answer

Correct Answer: C

Free Alibaba ACA-Sec1 Exam Actual Questions