CSA-C01 Practice Tests - Alibaba Cloud Security Engineer

Prévia do material em texto

Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
1 / 5
Exam : CSA-C01
Title :
https://www.passcert.com/CSA-C01.html
Alibaba Cloud Certified
Associate: Cloud Security
Engineer
Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
2 / 5
1.A company is migrating several applications to Alibaba Cloud. The security team wants to clarify which
task is typically the customer's responsibility under the shared responsibility model.
Which task should the customer handle?
A. Replacing failed physical disks in Alibaba Cloud data centers
B. Maintaining the power supply of the underlying facilities
C. Securing the operating system, applications, and data
D. Managing the physical access controls of cloud regions
Answer: C
2.A developer only needs to view logs for troubleshooting, but the administrator grants the developer full
permissions to all cloud resources.
Which security principle is being violated?
A. Defense in depth
B. Separation of duties
C. Data minimization
D. Least privilege
Answer: D
3.A company protects its workloads by using RAM policies, security groups, Cloud Firewall, Security
Center, KMS, and ActionTrail together.
Which security concept does this best represent?
A. Single sign-on
B. Defense in depth
C. Elastic computing
D. Resource tagging
Answer: B
4.A security administrator needs to investigate who deleted an ECS instance and when the operation
occurred.
Which type of control is most relevant?
A. Audit logging
B. Web traffic acceleration
C. DNS load balancing
D. Image replication
Answer: A
5.A company runs a public-facing website on Alibaba Cloud. The application must be protected against
SQL injection and cross-site scripting attacks.
Which service category should be used?
A. Host baseline assessment
B. Key management
C. API operation auditing
D. Web application protection
Answer: D
Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
3 / 5
6.A company wants to reduce the risk caused by a stolen administrator password.
Which practice is most effective?
A. Use one shared administrator account
B. Disable all operation logging
C. Enable multi-factor authentication and restrict permissions
D. Grant all users the same access policy
Answer: C
7.A company stores confidential customer files in the cloud. The security team wants the files to remain
unreadable if the storage layer is accessed without authorization.
Which control should be implemented?
A. Public IP binding
B. Encryption at rest
C. Auto scaling
D. CDN caching
Answer: B
8.An organization wants to identify malware, vulnerabilities, weak passwords, and suspicious processes
on ECS instances.
Which capability is required?
A. Host security detection
B. DNS resolution auditing
C. Object lifecycle transition
D. Cross-zone load balancing
Answer: A
9.Before moving a production workload to Alibaba Cloud, a company wants to check for risky
configurations, unnecessary open ports, and weak security settings.
Which activity best supports this requirement?
A. Increasing instance specifications
B. Creating more snapshots
C. Shortening DNS TTL values
D. Performing a security baseline assessment
Answer: D
10.A company wants to centrally manage cryptographic keys used to protect sensitive data.
Which Alibaba Cloud service is most closely related to this requirement?
A. ActionTrail
B. CloudMonitor
C. Key Management Service
D. Bastionhost
Answer: C
Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
4 / 5
11.A company allows administrators to log on to production servers for maintenance. The security team
wants to control access and record operation sessions.
Which security requirement is being addressed?
A. Data lifecycle management
B. Privileged access governance
C. Web application filtering
D. DDoS traffic scrubbing
Answer: B
12.Why is relying on only one security control usually insufficient in a cloud environment?
A. A layered approach reduces risk if one control fails
B. One control automatically protects all services equally
C. Encryption replaces the need for identity management
D. Monitoring is unnecessary if a firewall is deployed
Answer: A
13.A company requires one administrator to create a permission policy and another administrator to
approve it before use.
Which security concept is being applied?
A. Data masking
B. Network segmentation
C. Security hardening
D. Separation of duties
Answer: D
14.A cloud security team wants visibility into API operations such as creating RAM users, modifying
policies, and changing security group rules.
Which capability is most important?
A. DDoS mitigation
B. Web vulnerability scanning
C. Cloud operation auditing
D. Object storage versioning
Answer: C
15.A company wants to limit which cloud resources a user can access based on job responsibilities.
Which control should be used?
A. Security group rules
B. Identity and access management policies
C. Anti-DDoS protection
D. Image backup policies
Answer: B
16.A workload contains sensitive data and is exposed to the Internet.
Which design approach is most appropriate?
Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
5 / 5
A. Apply identity, network, host, data, and logging controls together
B. Use a larger instance type and remove security rules
C. Disable encryption to improve application performance
D. Allow all inbound traffic and rely only on passwords
Answer: A
17.A security engineer finds that a database server has a public IP address and allows access from any
source.
What is the main security concern?
A. Poor storage utilization
B. Unoptimized DNS resolution
C. Weak snapshot scheduling
D. Excessive network exposure
Answer: D
18.A company wants to protect sensitive data during collection, storage, transmission, use, and deletion.
Which security focus does this describe?
A. Host image management
B. Network routing optimization
C. Data lifecycle protection
D. Region selection strategy
Answer: C
19.A security team wants to know when suspicious behavior occurs on cloud servers rather than
discovering it only after an incident.
Which capability should be enabled?
A. Static website hosting
B. Security monitoring and alerting
C. DNS recursive lookup
D. Storage tier conversion
Answer: B