What should you create to prevent spoofing of the internal network?
Answer(s): B
The CCST Cybersecurity Study Guide states that Access Control Lists (ACLs) can be used to filter traffic based on IP addresses and block packets that appear to originate from the internal network but arrive from external interfaces (IP spoofing)."ACLs can prevent spoofing by dropping traffic from external sources that claim to have an internal source address. Configuring ACLs on the perimeter firewall or router is a common countermeasure for IP spoofing."(CCST Cybersecurity, Basic Network Security Concepts, ACLs and Traffic Filtering section, Cisco Networking Academy)A (NAT rule) changes IP addresses but does not inherently prevent spoofing. B (ACL) is correct because it can enforce anti-spoofing filters.C (host file) only affects name resolution locally.D (DNS record) is for domain mapping, not spoofing prevention.
A remote worker is visiting a branch office to attend face-to-face meetings. The worker tries to associate their company laptop with the branch wireless access point (WAP) but is unable to do so.What is a possible cause?
The CCST Cybersecurity material explains that MAC address filtering is a wireless security measure that allows only devices with approved hardware addresses to connect. If the laptop's MAC address is not on the allow list, the connection will be blocked even if the SSID is correct. "Wireless access points can be configured with MAC address filters to limit network access to authorized devices. If a device's MAC address is not on the permitted list, the connection will fail regardless of credentials."(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security section, Cisco Networking Academy)A is unlikely because non-broadcast SSIDs can still be manually connected to. B is correct: MAC address filtering would block an unregistered device. C would cause IP issues after association, not prevent initial connection. D (open authentication) would allow connection, so it's not the cause here.
Which security assessment of IT systems verifies that PII data is available, accurate, confidential, and accessible only by authorized users?
Answer(s): D
The CCST Cybersecurity study material defines Information Assurance (IA) as the practice of managing information-related risks to ensure data availability, integrity, confidentiality, authentication, and non-repudiation. It specifically applies to sensitive information like PII (Personally Identifiable Information)."Information assurance involves the protection and validation of data so that it remains accurate, confidential, and available only to authorized users. IA ensures the trustworthiness of information, particularly when handling sensitive or regulated data such as PII." (CCST Cybersecurity, Vulnerability Assessment and Risk Management, Information Assurance section, Cisco Networking Academy)A (Risk framing) is part of risk management planning but does not verify data integrity and confidentiality directly.B (Cyber Kill Chain) is an attack lifecycle model.C (Workflow management) is about process efficiency, not data protection. D is correct: Information Assurance addresses the availability, accuracy, and confidentiality of sensitive data.
DRAG DROPMove each definition from the list on the left to the correct CIA Triad term on the right. Note: You will receive partial credit for each correct answer.
Answer(s): A
The CCST Cybersecurity Study Guide describes the CIA Triad as the foundational model for information security:Confidentiality"Confidentiality ensures that sensitive information is accessed only by authorized individuals and is protected from unauthorized disclosure."Integrity"Integrity ensures that data remains accurate, complete, and unaltered except by authorized processes or users."Availability"Availability ensures that information and systems are accessible to authorized users when needed." (CCST Cybersecurity, Essential Security Principles, CIA Triad section, Cisco Networking Academy)
What is the primary purpose of running a vulnerability scan on your network?
Answer(s): C
The CCST Cybersecurity Study Guide states that vulnerability scanning is an automated process used to identify known security weaknesses in systems, software, and network devices. These scans compare system configurations and software versions against databases of known vulnerabilities, such as the Common Vulnerabilities and Exposures (CVE) list."A vulnerability scan is an automated test that checks systems and networks for known weaknesses by matching them against a database of vulnerabilities such as CVEs. This allows administrators to identify exploitable conditions before they are leveraged by attackers." (CCST Cybersecurity, Vulnerability Assessment and Risk Management, Vulnerability Scanning section, Cisco Networking Academy)A is asset discovery, not vulnerability scanning.B may be part of remediation planning but is not the primary purpose. C is correct: Scans detect if systems have vulnerabilities associated with CVEs. D describes SIEM (Security Information and Event Management) log correlation, not vulnerability scanning.
Post your Comments and Discuss Cisco 100-160 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 100-160 content, but please register or login to continue.