Cisco 100-160 Practice Exam Questions & Answers

The CCST Cybersecurity material explains that MAC address filtering is a wireless security measure that allows only devices with approved hardware addresses to connect. If the laptop's MAC address is not on the allow list, the connection will be blocked even if the SSID is correct.

'Wireless access points can be configured with MAC address filters to limit network access to authorized devices. If a device's MAC address is not on the permitted list, the connection will fail regardless of credentials.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security section, Cisco Networking Academy)

A is unlikely because non-broadcast SSIDs can still be manually connected to.

B is correct: MAC address filtering would block an unregistered device.

C would cause IP issues after association, not prevent initial connection.

D (open authentication) would allow connection, so it's not the cause here.

The CCST Cybersecurity Study Guide explains that hard disk encryption is a method used to protect data stored on a physical device from unauthorized access.

'Data at rest refers to data stored on a device, such as files on a hard drive, SSD, or removable media. Hard disk encryption protects data at rest by converting it into an unreadable format unless accessed with the correct decryption key.'

(CCST Cybersecurity, Essential Security Principles, Data States and Protection Methods section, Cisco Networking Academy)

Data in process refers to data actively being handled by applications in memory (RAM), which is not the primary target of disk encryption.

Data in transit is protected via encryption methods such as TLS, not disk encryption.

Data in use is accessed and manipulated by programs in real-time, also not the primary scope of disk encryption.

Data at rest is the correct answer, as hard disk encryption directly safeguards stored files.

According to the Cisco Certified Support Technician (CCST) Cybersecurity Study Guide, a honeypot is a security mechanism that appears to be a legitimate system or resource but is intentionally made vulnerable to attract attackers. Its purpose is not to serve legitimate users but to detect, study, and sometimes divert malicious activity.

'A honeypot is a decoy system or service designed to attract and engage attackers. By simulating a target of interest, it allows security teams to monitor attack methods, collect intelligence, and sometimes divert threats away from production systems. Honeypots do not prevent attacks but help in identifying them and understanding adversary tactics.'

(CCST Cybersecurity, Basic Network Security Concepts, Honeypots and Honey Nets section, Cisco Networking Academy)

In this context:

Option A describes an IDS (Intrusion Detection System), not a honeypot.

Option C refers to a DMZ (Demilitarized Zone), not a honeypot.

Option D describes an IPS (Intrusion Prevention System).

Option B correctly identifies a honeypot's role as a decoy to divert or engage attackers.

The CCST Cybersecurity Study Guide highlights that SSH (Secure Shell) provides encrypted communication for secure remote access and file transfer (using SCP or SFTP) over unsecured networks. This ensures confidentiality and integrity of the files in transit.

'SSH encrypts all data exchanged between client and server, protecting credentials and file contents from interception. It is the preferred protocol for secure device management and file transfers across untrusted networks.'

(CCST Cybersecurity, Basic Network Security Concepts, Secure Remote Management section, Cisco Networking Academy)

A (Telnet) transmits data in plaintext.

B (HTTP) is unencrypted web traffic.

C (TFTP) is a simple, insecure file transfer protocol without encryption.

D is correct: SSH secures configuration file transfers across insecure networks.

The CCST Cybersecurity Study Guide emphasizes that backups should be stored off-site or in the cloud to ensure recovery even if the primary location is damaged or compromised.

'A comprehensive disaster recovery plan includes performing regular backups and ensuring copies are stored in locations not subject to the same physical risks as the primary site. Off-site storage and cloud-based backups provide resilience against local disasters.'

(CCST Cybersecurity, Essential Security Principles, Backup and Disaster Recovery section, Cisco Networking Academy)

A is correct: Off-site removable media ensures recovery even if the main site is destroyed.

B is incorrect: Local-only backups are vulnerable to the same risks as production systems.

C is correct: Cloud services provide geographically separate storage with automated redundancy.

D is incorrect: RAID is for hardware fault tolerance, not a complete backup solution.

The CCST Cybersecurity Study Guide highlights FileVault as the macOS full-disk encryption tool.

'FileVault is macOS's built-in full-disk encryption feature. It encrypts the contents of the entire startup disk to help prevent unauthorized access to the information stored on the drive, even if the device is lost or stolen.'

(CCST Cybersecurity, Endpoint Security Concepts, Disk Encryption section, Cisco Networking Academy)

A is correct: FileVault provides complete volume encryption.

B (Gatekeeper) controls app installation by verifying code signatures.

C (System Integrity Protection) protects system files from modification.

D (XProtect) is macOS's built-in malware detection system.

The CCST Cybersecurity Study Guide specifies that both Wireshark and tcpdump are packet capture tools that can record network traffic to a file for later analysis.

'Wireshark provides a graphical interface for packet capture and analysis. Tcpdump is a command-line tool that captures packets for detailed offline review.'

(CCST Cybersecurity, Incident Handling, Network Traffic Analysis section, Cisco Networking Academy)

A is correct: Wireshark is widely used for packet capture and analysis.

B is correct: tcpdump is a CLI-based packet capture tool.

C (Nmap) is for network scanning, not packet capture.

D (netstat) displays network connections and ports but does not capture packets.