Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
Exam : CSA-C01
Title : Alibaba Cloud Certified
Associate: Cloud Security
Engineer
https://www.passcert.com/CSA-C01.html
1/5
, Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
1.A company is migrating several applications to Alibaba Cloud. The security team wants to clarify which
task is typically the customer's responsibility under the shared responsibility model.
Which task should the customer handle?
A. Replacing failed physical disks in Alibaba Cloud data centers
B. Maintaining the power supply of the underlying facilities
C. Securing the operating system, applications, and data
D. Managing the physical access controls of cloud regions
Answer: C
2.A developer only needs to view logs for troubleshooting, but the administrator grants the developer full
permissions to all cloud resources.
Which security principle is being violated?
A. Defense in depth
B. Separation of duties
C. Data minimization
D. Least privilege
Answer: D
3.A company protects its workloads by using RAM policies, security groups, Cloud Firewall, Security
Center, KMS, and ActionTrail together.
Which security concept does this best represent?
A. Single sign-on
B. Defense in depth
C. Elastic computing
D. Resource tagging
Answer: B
4.A security administrator needs to investigate who deleted an ECS instance and when the operation
occurred.
Which type of control is most relevant?
A. Audit logging
B. Web traffic acceleration
C. DNS load balancing
D. Image replication
Answer: A
5.A company runs a public-facing website on Alibaba Cloud. The application must be protected against
SQL injection and cross-site scripting attacks.
Which service category should be used?
A. Host baseline assessment
B. Key management
C. API operation auditing
D. Web application protection
Answer: D
2/5
Exam : CSA-C01
Title : Alibaba Cloud Certified
Associate: Cloud Security
Engineer
https://www.passcert.com/CSA-C01.html
1/5
, Get Valid Alibaba Cloud CSA-C01 PDF Dumps for Good Learning
1.A company is migrating several applications to Alibaba Cloud. The security team wants to clarify which
task is typically the customer's responsibility under the shared responsibility model.
Which task should the customer handle?
A. Replacing failed physical disks in Alibaba Cloud data centers
B. Maintaining the power supply of the underlying facilities
C. Securing the operating system, applications, and data
D. Managing the physical access controls of cloud regions
Answer: C
2.A developer only needs to view logs for troubleshooting, but the administrator grants the developer full
permissions to all cloud resources.
Which security principle is being violated?
A. Defense in depth
B. Separation of duties
C. Data minimization
D. Least privilege
Answer: D
3.A company protects its workloads by using RAM policies, security groups, Cloud Firewall, Security
Center, KMS, and ActionTrail together.
Which security concept does this best represent?
A. Single sign-on
B. Defense in depth
C. Elastic computing
D. Resource tagging
Answer: B
4.A security administrator needs to investigate who deleted an ECS instance and when the operation
occurred.
Which type of control is most relevant?
A. Audit logging
B. Web traffic acceleration
C. DNS load balancing
D. Image replication
Answer: A
5.A company runs a public-facing website on Alibaba Cloud. The application must be protected against
SQL injection and cross-site scripting attacks.
Which service category should be used?
A. Host baseline assessment
B. Key management
C. API operation auditing
D. Web application protection
Answer: D
2/5
