Alibaba ACA Cloud Security Certification - ACA-Sec1 Exam Questions [2026]

QUESTION NO: 1
What is the correct action sequence of WAF protection strategy: (1) CC detection (2) Web application attack detection (3) Access control Score 2

A. 213 B. 312 C. 231 D. 132

Correct Answer: B

QUESTION NO: 2
Which of the following statements about WAF data risk control feature is NOT true?

A. direct access URL protected by this feature will have slider verification pop out B. this feature can only used for single page, can't be used to protect the whole domain name C. WAF need to inject JavaScript piece into all pages under the same protected domain name to decide if the client side is worth to trust D. this feature is not suitable for scenario needs to call API directly

Correct Answer: B

QUESTION NO: 3
Which of the following protection rules are provided by WAF to better protect from CC attack? (the number of correct answers: 2)

A. Emergency B. Normal C. Loose D. Strict

Correct Answer: C,D

QUESTION NO: 4
What status transition flow a TCP client will go through in order to proactively establish connection and disconnect it?

A. SYNC_SENT- ->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2-->CLOSE_WAIT B. SYNC_SENT- ->SYNC_RCVD-->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2 C. SYNC_RCVD- ->ESTABLISHED-->CLOSE_WAIT-->TIME_WAIT-->LAST_ACK D. SYNC_SENT- ->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2-->TIME_WAIT

Correct Answer: D

QUESTION NO: 5
Which of the following benefit cannot be provided by 'Server Guard'?
Score 2

A. get instant alerts after attacks are detected B. lower the cost of security protection C. improve the usage of system resource D. lower the risk of sensitive data leak

Correct Answer: C

QUESTION NO: 6
Which of the following protocol can be considered as 'application' layer protocol in ISO/OSI 7 layer model?

A. SMTP B. IP C. UDP D. TCP

Correct Answer: A

QUESTION NO: 7
Which of the following statements are NOT true about 'Server Guard' remote logon detection functionality?

A. It can send warning message to 'Server Guard' user B. It can detect the attacking tool used by attacker C. It can detect the remote logon used source IP address D. It needs to setup common logon location in 'Server Guard' configuration

Correct Answer: B

QUESTION NO: 8
Which of the following statements is true about classic network and VPC?

A. you can customize your private IP in VPC B. you can customize your private IP in a classic network C. servers inside VPC can only communicate to other VPC network D. they can do same thing

Correct Answer: D

QUESTION NO: 9
After using WAF, if you find there are many user input data in the network traffic, you should apply:

A. Strict protection policy B. Loose protection policy C. Normal protection policy D. Progression protection policy

Correct Answer: A