EMT Practice Test

1. Question Content...

---

Question1: What status transition flow a TCP client will go through in order to proactively establish connection and disconnect it?

Question2: After using WAF, if you find there are many user input data in the network traffic, you should apply:

Question3: In May 2017 a new blackmail virus WannaCry burst globally, using Windows OS open port 445 to initiate its attacks. What is the quickest way to prevent this kind of attacks?

Question4: Alibaba Cloud will provide hot fix to address existing vulnerabilities. Which of the following statements is true about this 'hot fix'?

Question5: Which of the following methods CANNOT increase account security?

Question6: Which directory is the home directory of root user?

Question7: Which of the following statements about IPV6 and IPV4 are true?(the number of correct answers: 2)

Question8: In Linux OS, if you want to set a file access privilege to read, write, and execute for the owner only, what octal number will reflect such settings correctly?
Score 2

Question9: For an IP subnet like 192.168.0.0/24, which of the following statements is true?

Question10: Which of the following statements about the supported way of MySQL DB for backup are true?(the number of correct answers: 2)

Question11: Which of the following function is provided by 'server guard' patch management service?

Question12: Which of following statements about the possible reasons that cause web server vulnerabilities are true? (the number of correct answers: 2) Score 1

Question13: Which of the following benefit cannot be provided by 'Server Guard'?
Score 2

Question14: Which of the following protocols will not be used for a SYN Flood attack?

Question15: If your company has a lot of employees who would try to simultaneously access ECS server protected by 'Server Guard' using your company's intranet, the 'Sever Guard' may mistakenly identify those access requests as attacks. Which of the following methods is the best way to solve this problem? Score 2

Question16: In making cloud accounts more secure, which of the following is NOT a guiding principle?

Question17: What of the followings will happen if encounter DoS or DDoS attack?

Question18: Which of the following statements about VLAN are NOT true?(the number of correct answers: 3) Score 1

Question19: In Linux OS, if access control to a file is shown as '-rwxrw-r--' in shell command, which of the following statements are true?
Score 2

Question20: Which of the following statements about 'webshell' detection feature of WAF is NOT true?

Question21: Which of the following methods can't be used to prevent SQL injection attack?

Question22: Which service in RedHat Linux OS can be used to build network firewall functionality?
Score 2

Question23: What is the correct action sequence of WAF protection strategy: (1) CC detection (2) Web application attack detection (3) Access control Score 2

Question24: Apart from technical approaches, the proper data security management rules can be applied in daily operations to lower the risk of information leakage. Which of the following risks can be mitigated setting a strong data security management policy for company's employees?
Score 2

Question25: Which of the following protocol is dedicated to resolve IP and MAC addresses?

Question26: Which of the following statements about WAF data risk control feature is NOT true?

Question27: Which of the following functions does not belong to what WAF can provide?

Question28: Which of the following options does not belong to 5 key elements of network communication?

Question29: May, 2017. New blackmail virus WannaCry burst globally. This virus leveraged Windows OS opened port 445 to initiate the attack, so the quickest way to prevent this kind of attack is?

Question30: In Windows OS you can turn off a service through: Score 2

Question31: Using RAM, Alibaba Cloud users can create and manage user accounts and control the operation permissions these user accounts possess for resources under your account. Which of the following descriptions of a RAM usage scenario is NOT correct?

Question32: Which of the following statements is NOT true about daily operation on server account andpassword maintenance?

Question33: Which version of WAF will provide advisor customized protection rule?
Score 2

Question34: Which of the following statements is the possible reason that might lead to system vulnerabilities?

Question35: If WAF service user updated web page content after turning on website tampering protection, what does user need to do on WAF console?

Question36: Which of the following options can be considered as Physical environment security risks in IT infrastructure

Question37: Which of the following issues would not happen if ECS server is under attack by hackers?

Question38: Which of the following DDoS descriptions are correct?

Question39: In the Alibaba Cloud, which services can satisfy client user identity management requirements?

Question40: Which of the following protocols is not an application level protocol in ISO/OSI 7 layer networking model?

Question41: Which of the following protocol is dedicated for time sync up? Score 2

Question42: Which of the following products is designed to provide secured and stable network connection among different VPCs?

Question43: When 'Server Guard' detects remote logon behavior, what information will be shown on 'Server Guard' console?

Question44: After WAF was purchased, users need to add one DNS record to map their domain name to WAF provided IP. What is the type of that DNS record?

Question45: Which of these options contains the three basic target categories for a DoS or a DDoS?

Question46: Regarding the 'Shared Security Responsibilities' on Alibaba Cloud, which of the following options are the responsibilities Cloud user need to take care of ?

Question47: . In the ISO/OSI 7 layers networking model, which of the following functions are provided for the 'network layer'? (the number of correct answers: 2)

Question48: Which of the following logs can be accessed through ECS logs provided by Alibaba Cloud?
(the number of correct answers: 2)

Question49: Reliable server daily operation and security management are essential for continuous service running. Which of the following statement is NOT correct regarding to this scenario?

Question50: What design flaw of TCP/IP protocol does SYN flood attack use?