Alibaba Cloud ACP Cloud Security Professional ACP-Sec1 Question # 44 Topic 3 Discussion

Alibaba Cloud ACP Cloud Security Professional ACP-Sec1 Question # 44 Topic 3 Discussion

ACP-Sec1 Exam Topic 3 Question 44 Discussion:
Question #: 44
Topic #: 3

If an ECS instance needs to be accessed by other applications from internet, a corresponding "port" must be enabled For example, HTTP applications work on port 80, while FTP applications work on port 21 If an administrator configures network security policies for this ECS instance, which of the following policies is the safest?


A.

After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens ports 0-1024 for public networks


B.

After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens only the required service ports for public networks


C.

The administrator wants to build multiple applications on an ECS instance. For easy management, the administrator uses default settings and allows any IP address to access required service ports


D.

After buying an ECS instance, the administrator immediately enables the security group firewall on the console and opens all ports for public networks


Get Premium ACP-Sec1 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.