Cisco 100-160 Practice Test Questions Answers

TheCCST Cybersecurity Study Guideoutlines the standardrisk management processin the following sequence:

Identify the risks–

"Determine potential threats and vulnerabilities that could negatively impact organizational assets."

Prioritize the risks–

"Assess each risk in terms of likelihood and potential impact to rank them for remediation."

Implement a response–

"Apply the appropriate mitigation, transfer, acceptance, or avoidance strategy to address each prioritized risk."

Monitor results–

"Continuously assess the effectiveness of implemented controls and make adjustments as needed."

(CCST Cybersecurity,Vulnerability Assessment and Risk Management, Risk Management Process section, Cisco Networking Academy)

TheCCST Cybersecurity Study Guideexplains that hard disk encryption is a method used to protectdata stored on a physical devicefrom unauthorized access.

"Data at rest refers to data stored on a device, such as files on a hard drive, SSD, or removable media. Hard disk encryption protects data at rest by converting it into an unreadable format unless accessed with the correct decryption key."

(CCST Cybersecurity,Essential Security Principles, Data States and Protection Methods section, Cisco Networking Academy)

Data in processrefers to data actively being handled by applications in memory (RAM), which is not the primary target of disk encryption.

Data in transitis protected via encryption methods such as TLS, not disk encryption.

Data in useis accessed and manipulated by programs in real-time, also not the primary scope of disk encryption.

Data at restis the correct answer, as hard disk encryption directly safeguards stored files.

TheCCST Cybersecuritycourse defines a strong password as one that:

Is at least 8–12 characters long

Uses a mix of uppercase, lowercase, numbers, and symbols

Avoids dictionary words, personal information, and predictable patterns

"Strong passwords combine length, complexity, and unpredictability, making them resistant to brute force and dictionary attacks."

(CCST Cybersecurity,Essential Security Principles, Authentication and Access Control section, Cisco Networking Academy)

Ais correct: It’s long, mixed case, includes numbers and symbols, and is not easily guessable.

Bis incorrect: It’s based on a date, which is predictable.

Cis incorrect: Short and based on a dictionary word.

Dis correct: Uses complexity and length with leetspeak for added unpredictability.

According to theCCST Cybersecuritycourse, anti-malware solutions withreal-time protectionscan files as they are downloaded or opened, blocking malicious code before it runs.

"Real-time protection automatically inspects files, applications, and scripts as they are accessed or downloaded, preventing execution of malicious code."

(CCST Cybersecurity,Endpoint Security Concepts, Malware Protection section, Cisco Networking Academy)

TheCCST Cybersecuritycourse identifiesWindows PowerShellas both a command-line interface (CLI) and a robust scripting environment. It is used by system administrators for automation, configuration, and task scheduling.

"PowerShell is a Windows command-line shell and scripting language built on the .NET framework. It allows administrators to automate administrative tasks, manage system configurations, and execute complex scripts for system management."

(CCST Cybersecurity,Endpoint Security Concepts, System Administration Tools section, Cisco Networking Academy)

Ais correct: PowerShell provides both interactive command execution and scripting capabilities.

B(MMC) is a GUI-based management console, not a CLI.

C(Vim) is a text editor, not a Windows-native CLI.

D(MS-DOS) is a legacy command shell with no advanced scripting features comparable to PowerShell.