Which macOS security feature encrypts the entire macOS volume?
Answer(s): A
The CCST Cybersecurity Study Guide highlights FileVault as the macOS full-disk encryption tool. "FileVault is macOS's built-in full-disk encryption feature. It encrypts the contents of the entire startup disk to help prevent unauthorized access to the information stored on the drive, even if the device is lost or stolen."(CCST Cybersecurity, Endpoint Security Concepts, Disk Encryption section, Cisco Networking Academy)A is correct: FileVault provides complete volume encryption. B (Gatekeeper) controls app installation by verifying code signatures. C (System Integrity Protection) protects system files from modification.D (XProtect) is macOS's built-in malware detection system.
You are reviewing your company's disaster recovery plan. Which two daily data backup actions should the plan include? (Choose 2.)
Answer(s): A,C
The CCST Cybersecurity Study Guide emphasizes that backups should be stored off-site or in the cloud to ensure recovery even if the primary location is damaged or compromised. "A comprehensive disaster recovery plan includes performing regular backups and ensuring copies are stored in locations not subject to the same physical risks as the primary site. Off-site storage and cloud-based backups provide resilience against local disasters." (CCST Cybersecurity, Essential Security Principles, Backup and Disaster Recovery section, Cisco Networking Academy)A is correct: Off-site removable media ensures recovery even if the main site is destroyed. B is incorrect: Local-only backups are vulnerable to the same risks as production systems. C is correct: Cloud services provide geographically separate storage with automated redundancy. D is incorrect: RAID is for hardware fault tolerance, not a complete backup solution.
Which two passwords follow strong password policy guidelines? (Choose 2.)
Answer(s): A,D
The CCST Cybersecurity course defines a strong password as one that:Is at least 812 characters longUses a mix of uppercase, lowercase, numbers, and symbols Avoids dictionary words, personal information, and predictable patterns"Strong passwords combine length, complexity, and unpredictability, making them resistant to brute force and dictionary attacks."(CCST Cybersecurity, Essential Security Principles, Authentication and Access Control section, Cisco Networking Academy)A is correct: It's long, mixed case, includes numbers and symbols, and is not easily guessable. B is incorrect: It's based on a date, which is predictable. C is incorrect: Short and based on a dictionary word. D is correct: Uses complexity and length with leetspeak for added unpredictability.
Your home network seems to have slowed down considerably. You look at the home router GUI and notice that an unknown host is attached to the network. What should you do to prevent this specific host from attaching to the network again?
Answer(s): B
The CCST Cybersecurity course explains that MAC address filtering is a network access control method that allows only approved device hardware addresses to connect. While not foolproof against spoofing, it can block a specific device from reconnecting to a small home network. "MAC address filtering restricts network access to devices whose unique hardware addresses are explicitly allowed. This can be used to block known unauthorized devices from reconnecting." (CCST Cybersecurity, Basic Network Security Concepts, Wireless Security Controls section, Cisco Networking Academy)A is incorrect: IP ACLs are better for controlling traffic types, not blocking specific devices at the router level.B is correct: It prevents the device's hardware address from reconnecting. C is temporary since the host can get a new IP via DHCP.D may hide the network but will not stop a determined attacker who can still detect it.
HOTSPOTFor each statement, select True if it is a common motivation to commit cyber attacks or False if it is not.Note: You will receive partial credit for each correct selection.
The CCST Cybersecurity Study Guide outlines common motivations for cyberattacks, which include:Financial gainRevenge or personal grievance (e.g., disgruntled employees) Ideological or political purposes (hacktivism)Espionage and intelligence gathering"Cyberattack motivations range from financial and competitive advantage to personal vendettas and advancing political or social causes. Disgruntled insiders may misuse access privileges to harm an organization, while hacktivists target systems to promote social or political messages." (CCST Cybersecurity, Essential Security Principles, Threat Actor Motivations section, Cisco Networking Academy)Being disgruntled at work common insider threat motivation (True) Wanting to protect personal data defensive action, not a reason to commit an attack (False) Wanting to advance a social agenda hacktivist motivation (True)
Post your Comments and Discuss Cisco 100-160 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 100-160 content, but please register or login to continue.