Important Cisco 100-160 CCST Cybersecurity Exam Questions

Answer: D

Explanation:

The CCST Cybersecurity study material defines Information Assurance (IA) as the practice of managing information-related risks to ensure data availability, integrity, confidentiality, authentication, and non-repudiation. It specifically applies to sensitive information like PII (Personally Identifiable Information).

'Information assurance involves the protection and validation of data so that it remains accurate, confidential, and available only to authorized users. IA ensures the trustworthiness of information, particularly when handling sensitive or regulated data such as PII.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Information Assurance section, Cisco Networking Academy)

A (Risk framing) is part of risk management planning but does not verify data integrity and confidentiality directly.

B (Cyber Kill Chain) is an attack lifecycle model.

C (Workflow management) is about process efficiency, not data protection.

D is correct: Information Assurance addresses the availability, accuracy, and confidentiality of sensitive data.

Answer: A

Explanation:

The CCST Cybersecurity course highlights that signs of brute-force attacks followed by successful access require immediate account security actions and an investigation to determine if other systems were accessed.

'When suspicious login activity is detected, immediate containment steps such as password resets and log analysis are necessary to limit damage and identify the extent of the compromise.'

(CCST Cybersecurity, Incident Handling, Account Compromise Response section, Cisco Networking Academy)

Answer: B

Explanation:

According to the CCST Cybersecurity course, anti-malware solutions with real-time protection scan files as they are downloaded or opened, blocking malicious code before it runs.

'Real-time protection automatically inspects files, applications, and scripts as they are accessed or downloaded, preventing execution of malicious code.'

(CCST Cybersecurity, Endpoint Security Concepts, Malware Protection section, Cisco Networking Academy)

Answer: B

Explanation:

The CCST Cybersecurity Study Guide describes a man-in-the-middle (MITM) attack as an attack where the adversary secretly intercepts and possibly alters communications between two parties, making them believe they are communicating directly. A rogue AP configured to pass traffic through itself before sending it on is a classic wireless MITM method.

'In a MITM attack, the attacker places themselves between the sender and receiver, intercepting and possibly altering data in transit. Rogue access points can facilitate MITM attacks in wireless environments.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Threats section, Cisco Networking Academy)

A is incorrect: Reconnaissance is information gathering, not active interception.

B is correct: This is a wireless MITM attack.

C is incorrect: DDoS aims to overwhelm a service, not intercept data.

D is incorrect: Ransomware encrypts data for extortion.

Answer: B

Explanation:

According to the Cisco Certified Support Technician (CCST) Cybersecurity Study Guide, a honeypot is a security mechanism that appears to be a legitimate system or resource but is intentionally made vulnerable to attract attackers. Its purpose is not to serve legitimate users but to detect, study, and sometimes divert malicious activity.

'A honeypot is a decoy system or service designed to attract and engage attackers. By simulating a target of interest, it allows security teams to monitor attack methods, collect intelligence, and sometimes divert threats away from production systems. Honeypots do not prevent attacks but help in identifying them and understanding adversary tactics.'

(CCST Cybersecurity, Basic Network Security Concepts, Honeypots and Honey Nets section, Cisco Networking Academy)

In this context:

Option A describes an IDS (Intrusion Detection System), not a honeypot.

Option C refers to a DMZ (Demilitarized Zone), not a honeypot.

Option D describes an IPS (Intrusion Prevention System).

Option B correctly identifies a honeypot's role as a decoy to divert or engage attackers.