Alibaba ACP-Sec1 Exam - Topic 6 Question 31 Discussion

Actual exam question for Alibaba's ACP-Sec1 exam

Question #: 31
Topic #: 6

To improve ECS instance security, the administrator does not want users on public network to check whether an ECS instance is online using the ping command. Which of the following reinforcement measures designed by the administrator is NOT feasible?

AResolve the IP address of the ECS instance to an uncommon level 4 domain name, and point the promotional domain name to the level 4 domain name through CNAME

BEnable a security group and only allow access from ports 80 and 25 of the public network through TCP

CEnable a security group, and reject ICMP for public network access.

DEnable an operating system firewall for the ECS instance, and reject ICMP for public network access.

Show Suggested Answer

Suggested Answer: A

by Eun at May 06, 2022, 01:52 AM

Limited Time Offer

25%

Off

Get Premium ACP-Sec1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Major

4 months ago

D is solid, firewalls are essential for security!

upvoted 0 times

...

Jerry

4 months ago

A sounds a bit overcomplicated for just hiding an IP.

upvoted 0 times

...

Maryann

4 months ago

Wait, can you really hide an instance from ping like that?

upvoted 0 times

...

Gregoria

4 months ago

I think C is the best choice here!

upvoted 0 times

...

Aileen

5 months ago

Option B is definitely feasible, just limit the ports.

upvoted 0 times

...

Audrie

5 months ago

I think the correct order is A - Product, Product Features, Product Options, Option Constraints, Configuration Attributes. That seems to make the most logical sense to me.

upvoted 0 times

...

Mose

5 months ago

I feel like we covered this in class; I believe Layer 3 VPNs might use BGP for routing, while Layer 2 relies on something else?

upvoted 0 times

...

Pilar

5 months ago

I'm a bit confused on this one. Moving to a blue/green deployment pattern seems like it might not be the right solution for this specific problem. I'm going to have to think this through a bit more.

upvoted 0 times

...

Ryan

5 months ago

I think the answer could be C because it mentions configuring hunt group notifications. That sounds like what we practiced.

upvoted 0 times

...