ACA-Sec1 ACA Cloud Security Associate Question and Answers

Ping to the server

Simulate a DDoS attack on that server

Simulate a DoS attack on the server

Check if all the patches and required antivirus software has been loaded o the server

use 'remote desktop connection' for windows

use 'ssh' tool for windows

use 'remote desktop connection' for Linux

use 'ssh' tool for Linux

servers in VPC only configured with private network

any device internet reachable

government website

public DNS service

offline servers

Illegal Logon!

Migrated Already!

Logon Successfully!

Remote Logon Detected!

Loose protection policy

Normal protection policy

Strict protection policy

Progression protection policy

this feature can only used for single page, can't be used to protect the whole domain

name

WAF need to inject JavaScript piece into all pages under the same protected domain

name to decide if the client side is worth to trust

direct access URL protected by this feature will have slider verification pop out

this feature is not suitable for scenario needs to call API directly

for users who is using IAAS service, they should be responsible for their business system

which is on top of cloud infrastructure

cloud service provider should guarantee the security of all physical infrastructure

the damage caused by attacks leveraging security vulnerability in customers' application

server should be charged to cloud service provider

cloud user should also take care of some of the hardware maintenance and operation

work

SYN flood

ICMP flood

One host simulate many IP addresses

Attack through agent

Zombie network

Loose

Strict

Normal

Regular

Early Warning

XSS Attack

Server Information Theft

Code Execution

SQL Injection

Elastic Public IP

CDN

EIP + SLB

EIP + NAT Gateway

DNS service

Cache-Control

Date

Age

Expires

Host

In order to get admin password

Steal confidential information

Causes the target server unable to process legitimate requests

If the target server has no vulnerabilities, the remote attack may still succeed.

This attack is known as non-repudiation

This attack is known as TCP/IP hijacking

This attack is known as denial of service (DoS)

This attack is known as brute force

One client host can access another client's data

User service become unavailable

Hacker can access host server directly

Incorrect client resource usage calculating

reload

shutdown

init

restart

CC attack will simulate real user requests

Will consume massive sever side resource

CC attack is done on network layer

The request generated by CC attack is hard to be distinguished from normal requests

Share password between different users

Botnet attack

system vulnerability is not fixed in time

Wrong security configuration

hot fix doesn't need to reboot physical host

service will not be available during the hot fix

hot fix means the host need to reach some temperature upper limit to be able to

proceed

hot fix is transparent to end user