1. Which of the following scenarios can be considered as business fraud? (the number of correct answers: 2)(Select 2answers)

A) massive accounts registration for new user benefits gain
B) data leak because of data transmission with plain text
C) post massive comments with bots to some e-commerce website
D) page content including some porn pictures



2. Which of the following statements about cloud security shared responsibilities model are true? (the number of correct answers: 2)(Select 2answers)

A) the damage caused by attacks leveraging security vulnerability in customers' application server should be charged to cloud service provider
B) cloud service provider should guarantee the security of all physical infrastructure
C) cloud user should also take care of some of the hardware maintenance and operation work
D) for users who is using IAAS service, they should be responsible for their business system which is on top of cloud infrastructure



3. User A rented 2 ECS server and one RDS in Alibaba Cloud to setup his company public website. After the web site will become available online, the security risks he/she will face will include: (the number of correct answers: 3)(Select 3answers)

A) physical cable is cut by someone
B) ECS admin password is hacked
C) website codes has some vulnerability
D) RDS DB got unknown remote logon
E) the disk in ECS is broken


4. Which of the following scenarios should be handled by anti-DDOS service? (the number of correct answers: 3)(Select 3answers)

A) website is under XSS attacks
B) DNS server is under udp flood attack and got no response anymore
C) website is under SQL injection attack
D) online game service which is suffering with too many empty connections and slow connections
E) Server is under syn flood attack, and is not reachable


5. What status transition flow a TCP client will go through in order to proactively establish connection and disconnect it?

A) SYNC_SENT- ->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2-->TIME_WAIT
B) SYNC_SENT- ->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2-->CLOSE_WAIT
C) SYNC_RCVD- ->ESTABLISHED-->CLOSE_WAIT-->TIME_WAIT-->LAST_ACK
D) SYNC_SENT- ->SYNC_RCVD-->ESTABLISHED-->FIN_WAIT1-->FIN_WAIT2