Alibaba ACP-Cloud1 Exam - Topic 4 Question 73 Discussion

Actual exam question for Alibaba's ACP-Cloud1 exam

Question #: 73
Topic #: 4

Alibaba Cloud will check source IP addresses that connect to ApsaraDB for RDS through the public internet. When Alibaba Cloud Situation Awareness detects an alert reporting ''a seldom-used IP address connecting to the database,'' which of the following is the safest way to handle this alert?

AThis alert does not matter and can be ignored

BLog on to Alibaba Cloud console, modify the IP address whitelist for authorized access to RDS, and retain the IP addresses that need to connect to RDS

CModify the security group policies for ECS instances, and allow only specified IP addresses to connect to the server

DLog on to RDS console, and view the SQL audit logs to check whether any destructive operation has been performed. If no, you do not need to handle the alert

Show Suggested Answer

Suggested Answer: B

by Candra at Oct 24, 2024, 08:07 AM

Limited Time Offer

25%

Off

Get Premium ACP-Cloud1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Desire

7 days ago

I think C is a better option for security.

upvoted 0 times

...

Ty

13 days ago

Definitely B, you can't ignore those alerts!

upvoted 0 times

...

Terrilyn

19 days ago

I recall that checking the SQL audit logs is important, but I’m not convinced that just viewing them is enough to handle the alert.

upvoted 0 times

...

Carli

24 days ago

I feel like option C might be relevant too, but I’m not entirely clear on the differences between modifying security groups and whitelisting IPs.

upvoted 0 times

...

Audria

30 days ago

I practiced a similar question where modifying the IP whitelist was the right move, so I’m leaning towards option B.

upvoted 0 times

...

Coral

1 month ago

I think I remember that we shouldn't ignore alerts like this, but I'm not sure which option is the best response.

upvoted 0 times

...

Alpha

1 month ago

This is a great question to test our understanding of Alibaba Cloud security best practices. I'm confident I can analyze the options and select the most appropriate response.

upvoted 0 times

...

Malcolm

1 month ago

I'm a little confused by the wording of the question. I'll need to re-read it a few times to make sure I understand the context and the implications of each option.

upvoted 0 times

...

Fausto

1 month ago

Okay, I've got this. The safest approach is to modify the IP address whitelist and retain only the authorized IPs. That way, I can quickly address the security concern.

upvoted 0 times

...

Nikita

1 month ago

Hmm, I'm a bit unsure about this one. I'll need to think it through carefully to make sure I don't miss any important details.

upvoted 0 times

...

Devon

1 month ago

This seems like a straightforward security question. I'd carefully read through the options and choose the one that seems most appropriate for handling the alert.

upvoted 0 times

...

Brynn

6 months ago

I heard Alibaba's security team is so on point, they can detect a sneeze from a mile away. Better not even think about connecting to that database unless you've got a signed permission slip from the CEO.

upvoted 0 times

Stephaine

5 months ago

D) Log on to RDS console, and view the SQL audit logs to check whether any destructive operation has been performed. If no, you do not need to handle the alert

upvoted 0 times

...

Selma

5 months ago

C) Modify the security group policies for ECS instances, and allow only specified IP addresses to connect to the server

upvoted 0 times

...

Layla

6 months ago

B) Log on to Alibaba Cloud console, modify the IP address whitelist for authorized access to RDS, and retain the IP addresses that need to connect to RDS

upvoted 0 times

...

Bronwyn

6 months ago

Wait, we're supposed to actually do something about these alerts? I thought they were just there to keep us on our toes, like a fun little puzzle to solve.

upvoted 0 times

Louis

5 months ago

D) Log on to RDS console, and view the SQL audit logs to check whether any destructive operation has been performed. If no, you do not need to handle the alert

upvoted 0 times

...

Fabiola

6 months ago

C) Modify the security group policies for ECS instances, and allow only specified IP addresses to connect to the server

upvoted 0 times

...

Ashlyn

6 months ago

B) Log on to Alibaba Cloud console, modify the IP address whitelist for authorized access to RDS, and retain the IP addresses that need to connect to RDS

upvoted 0 times

...

Rodolfo

6 months ago

Checking the SQL audit logs? Ain't nobody got time for that! Just lock down that security group and call it a day. Easy peasy, lemon squeezy.

upvoted 0 times

Dino

5 months ago

B) Lock down that security group and call it a day. Easy peasy, lemon squeezy.

upvoted 0 times

...

Lorita

6 months ago

C) Modify the security group policies for ECS instances, and allow only specified IP addresses to connect to the server

upvoted 0 times

...

Cory

6 months ago

B) Log on to Alibaba Cloud console, modify the IP address whitelist for authorized access to RDS, and retain the IP addresses that need to connect to RDS

upvoted 0 times

...

Ciara

7 months ago

Modifying the IP address whitelist is definitely the way to go. Better to be proactive and secure that database than let some sketchy IP address sneak in.

upvoted 0 times

Matthew

5 months ago

D) Log on to RDS console, and view the SQL audit logs to check whether any destructive operation has been performed. If no, you do not need to handle the alert

upvoted 0 times

...

Kiley

5 months ago

B) Log on to Alibaba Cloud console, modify the IP address whitelist for authorized access to RDS, and retain the IP addresses that need to connect to RDS

upvoted 0 times

...

Louisa

6 months ago

C) Modify the security group policies for ECS instances, and allow only specified IP addresses to connect to the server

upvoted 0 times

...

Dudley

6 months ago

B) Log on to Alibaba Cloud console, modify the IP address whitelist for authorized access to RDS, and retain the IP addresses that need to connect to RDS

upvoted 0 times

...

Lavonna

7 months ago

A seldom-used IP address connecting to the database? That's a big red flag! I wouldn't ignore that alert in a million years. Better to be safe than sorry, right?

upvoted 0 times

Lashaun

6 months ago

D) Log on to RDS console, and view the SQL audit logs to check whether any destructive operation has been performed. If no, you do not need to handle the alert

upvoted 0 times

...

Kallie

6 months ago

B) Log on to Alibaba Cloud console, modify the IP address whitelist for authorized access to RDS, and retain the IP addresses that need to connect to RDS

upvoted 0 times

...