Curriculum
ACA-006 — 3-Module Programme
- Understand Anti-DDoS Basic — free DDoS protection bundled with ECS, SLB, and EIP and its default mitigation thresholds
- Configure Anti-DDoS Pro and Anti-DDoS Premium — BGP bandwidth, scrubbing centres, port configuration, and business traffic forwarding
- Deploy WAF (Web Application Firewall) — protect HTTP/HTTPS applications from OWASP Top 10 attacks including SQL injection, XSS, and command injection
- Configure WAF rule groups, custom access control lists, and IP whitelist/blacklist for web application security policy management
- Understand Security Center features — vulnerability scanning, baseline check, threat intelligence, and incident response for Alibaba Cloud workloads
- Configure Cloud Firewall — enable north-south and east-west traffic control with internet exposure analysis and access control policy management
- Use Alibaba Cloud SSL Certificate Service — purchase, issue, upload, and manage SSL/TLS certificates for HTTPS encryption
- Deploy Anti-Bot Service to identify and block automated bot traffic — credential stuffing, web scraping, and click fraud attacks
- Understand ECS security fundamentals — operating system hardening, security group rules, and disk encryption with KMS
- Configure VPC security architecture — subnet isolation, routing table control, NAT Gateway, and network access control lists
- Implement security group best practices — least-privilege inbound/outbound rules for HTTP, HTTPS, FTP, SSH, and RDP protocols
- Use RAM (Resource Access Management) to enforce least-privilege access for users, roles, and service accounts across ECS, OSS, and RDS
- Configure OSS bucket security — bucket ACLs, server-side encryption, signed URL access, and anti-leech policies
- Understand RDS security features — VPC binding, SSL connection encryption, IP whitelist, and database audit logs
- Use KMS (Key Management Service) for cloud disk encryption, OSS server-side encryption, and application-level key management
- Understand cloud security shared responsibility model — differentiate provider-managed vs. customer-managed security controls
- Study common attack types: DDoS volumetric attacks, brute-force login attacks, SQL injection, XSS, CSRF, and man-in-the-middle attacks
- Learn cryptography fundamentals — symmetric and asymmetric encryption, PKI, digital certificates, TLS/SSL handshake, and HTTPS
- Understand identity security concepts — multi-factor authentication (MFA), RBAC, single sign-on (SSO), and zero-trust access principles
- Study data security and compliance — data classification, data lifecycle management, GDPR/PIPL compliance requirements, and data residency
- Learn cloud security monitoring and response — log analysis, security event correlation, incident response procedures, and forensic evidence collection
- Understand web security vulnerability categories aligned with OWASP Top 10 — injection, broken authentication, SSRF, and security misconfiguration
ACA Cloud Security Associate
Course & Exam Details
3 Modules
Full ACA-006 domains
90 Minutes
Exam duration
60 Questions
MCQ format
60 / 100
Passing score
USD 120.00
Exam registration fee
Tech Support
Call / WhatsApp
Mon–Fri
9 AM – 6 PM