Download Exam 100-160 Practice Test Questions with 100% Verified Answers [Q151-Q171]

Rate this post

Download Exam 100-160 Practice Test Questions with 100% Verified Answers

Share Latest 100-160Test Practice Test Questions, Exam Dumps

Cisco 100-160 Exam Overview:

Certification Vendor:	Cisco
Exam Name:	Cisco Certified Support Technician (CCST) Cybersecurity
Exam Number:	100-160
Certificate Validity Period:	3 years
Related Certifications:	Cisco Certified Support Technician (CCST) Cybersecurity
Exam Price:	USD 125
Exam Duration:	50 minutes
Real Exam Qty:	40-50 (Estimate)
Available Languages:	Japanese, Spanish, Chinese (Traditional), Arabic, French, Portuguese, English
Exam Format:	Drag-and-Drop, Multiple-Choice, Simulation
Passing Score:	Approximately 70% (Scaled score 700-800 / 1000)
Sample Questions:	Cisco 100-160 Sample Questions
Exam Way:	Proctored (Pearson VUE)
Pre Condition:	None
Official Syllabus URL:	https://www.cisco.com/site/us/en/learn/training-certifications/exams/ccst-cybersecurity.html

Q151. You are reviewing your company’s disaster recovery plan.
Which two daily data backup actions should the plan include? (Choose 2.)

Back up the data to removable media and store it off-site.

Back up each department’s data to a separate local server.

Back up the data by using cloud services.

Back up the data by using RAID on a local external hard drive with a secondary power source.

Q152. Which of the following best describes the purpose of the MITRE ATT&CK; Matrix?

To map vulnerabilities and exposures in computer systems

To analyze the impact of cyber threats on critical infrastructure

To track the global distribution of cyber threat actors

To provide a standardized way to categorize cyber threat tactics and techniques

Q153. Which of the following describes the purpose of a firewall in network infrastructure?

To provide high-speed connectivity between different networks

To monitor network traffic for potential security threats

To regulate the flow of data between different network segments

To identify and prevent unauthorized access to the network

Q154. Which of the following is true about security policies and procedures?

They should be regularly reviewed and updated to reflect changing threats and technologies

They should only be accessible to the IT department.

They should be documented once and never changed.

They should be kept confidential and not shared with employees.

Q155. Which protocol is used for communication between web browsers and web servers?

ICMP

TCP

UDP

HTTP

Q156. Which of the following describes the purpose of a VPN (Virtual Private Network)?

To improve network performance and reduce latency

To segment a network into multiple smaller networks

To provide secure remote access to a private network over the internet

To control and filter network traffic based on predefined policies

Q157. Which of the following is a preventive control that can help in reducing the risk of future incidents?

Creating secure backups of critical data

Implementing strong access controls and authentication mechanisms

Regularly updating antivirus signatures

Conducting periodic employee training on incident response

Q158. Which protocol is responsible for resolving IP addresses to domain names?

DNS

HTTP

UDP

TCP

Q159. Which of the following is an essential component of effective vulnerability management?

Implementing strong user authentication mechanisms.

Conducting penetration testing.

Regularly updating antivirus software.

Configuring firewalls to block all incoming traffic.

Q160. You notice that a new CVE has been shared to an email group that you belong to.
What should you do first with the CVE?

Look up details of the vulnerability to determine whether it applies to your network.

Research measures to prevent the CVE from attacking the network.

Record the CVE as part of the disaster recovery plan.

Add the CVE to the firewall rules for your organization.

Q161. Which of the following is an example of a preventive control in computer operations?

Backup and recovery procedures

Firewall implementation

Incident response planning

Penetration testing

Q162. Which technology actively inspects incoming and outgoing network traffic and takes immediate action to prevent security threats?

Firewall

IPS

Server

IDS

Q163. What term refers to the process of creating a virtual version of a device or resource, such as a server or a network?

Virtualization

DMZ

Cloud

Proxy

Q164. Which two passwords follow strong password policy guidelines? (Choose 2.)

Wh@tareyouDo1ngtoday4

Feb121978

Fluffy#

1mPressm3!

Q165. Which of the following best describes the concept of “defense in depth” in cybersecurity?

Establishing strong password policies and enforcing multi-factor authentication

Utilizing multiple layers of security measures to protect against threats

Deploying advanced encryption algorithms to secure sensitive data

Regularly conducting training programs for employees to promote cybersecurity awareness

Q166. You are collecting data after a suspected intrusion on the local LAN.
You need to capture incoming IP packets to a file for an investigator to analyze.
Which two tools should you use? (Choose 2.)

Wireshark

tcpdump

Nmap

netstat

Q167. You need to design your company’s password policy to adhere to the National Institute of Standards and Technology (NIST) guidelines for user password security.
What is the minimum password length that you should require to be consistent with the NIST guidelines?

4 characters

8 characters

16 characters

No minimum length

Q168. Which of the following is a common technique used by malware to evade detection?

Continuous monitoring of network traffic

Encryption of communication channels

Implementation of strong firewalls

Frequent system scans and updates

Q169. Which of the following is a common proactive measure for managing vulnerabilities?

Regularly updating antivirus signatures

Performing regular system backups

Implementing data encryption

Conducting vulnerability assessments

Q170. Which security measure can prevent unauthorized devices from automatically connecting to a corporate network through unused switch ports?

Port security

VLAN trunking

NAT

VPN

Q171. Which of the following is an example of a strong password?

“abcdabcd”

“Password123”

“StR0ngP@$$w0rd!”

“123456”

Cisco 100-160 Exam Syllabus Topics:

Topic	Details
Topic 1	Essential Security Principles: This section of the exam measures the skills of a Cybersecurity Technician and covers foundational cybersecurity concepts such as the CIA triad (confidentiality, integrity, availability), along with basic threat types and vulnerabilities, laying the conceptual groundwork for understanding how to protect information systems.
Topic 2	Endpoint Security Concepts:This section of the exam measures the skills of an Endpoint Security Specialist and includes securing individual devices, understanding protections such as antivirus, patching, and access control at the endpoint level, essential for maintaining device integrity.
Topic 3	Incident Handling: This section of the exam measures the skills of an Incident Responder and centers on recognizing security incidents, responding appropriately, and containing threats—forming the essential foundation of incident response procedures.
Topic 4	Basic Network Security Concepts: This section of the exam measures the skills of a Network Defender and focuses on understanding network-level protections, including firewalls, VPNs, and intrusion detection prevention systems, providing insight into how threats are mitigated within network environments.
Topic 5	Vulnerability Assessment and Risk Management: This section of the exam measures the skills of a Risk Management Analyst and entails identifying and assessing vulnerabilities, understanding risk priorities, and applying mitigation strategies that help manage threats proactively within an organization’s systems