Cisco CCST Cybersecurity

Which element of the CIA triad ensures that data has not been altered or tampered with during storage or transmission?

• AConfidentiality
• BIntegrity
• CAvailability
• DAuthentication

What type of malware disguises itself as legitimate software to trick users into installing it?

• AWorm
• BTrojan horse
• CRansomware
• DRootkit

Which authentication method requires a user to provide two or more different types of credentials before gaining access?

• ASingle sign-on (SSO)
• BRole-based access control (RBAC)
• CMulti-factor authentication (MFA)
• DKerberos authentication

What is the primary purpose of encryption in cybersecurity?

• ATo verify the identity of a user
• BTo protect data confidentiality by converting it into an unreadable format
• CTo ensure data is available at all times
• DTo detect unauthorized changes to data

A user receives an email that appears to be from their bank asking them to click a link and verify their account details. What type of attack is this?

• ADenial of Service (DoS)
• BPhishing
• CMan-in-the-middle
• DBrute force

Which network security device inspects traffic and blocks malicious activity based on predefined signatures and behavioral analysis?

• ARouter
• BIntrusion Prevention System (IPS)
• CLoad balancer
• DDNS server

What is the purpose of a firewall in network security?

• ATo encrypt all network traffic automatically
• BTo filter network traffic based on predefined security rules
• CTo detect malware on endpoint devices
• DTo backup critical network data

Which of the following is a characteristic of symmetric encryption?

• AUses a public key for encryption and a private key for decryption
• BUses the same key for both encryption and decryption
• CIs slower than asymmetric encryption
• DDoes not require key exchange between parties

What does the principle of least privilege mean in access management?

• AAll users should have administrator access by default
• BUsers should be granted only the minimum access necessary to perform their job functions
• CAccess should be revoked after each login session
• DPrivileges should be shared among team members

Which type of malware spreads automatically across networks without requiring user interaction?

• ATrojan horse
• BVirus
• CWorm
• DAdware

What is the function of a VPN (Virtual Private Network) in network security?

• ATo assign IP addresses to remote users
• BTo create an encrypted tunnel for secure communication over public networks
• CTo detect and block malware at the network perimeter
• DTo balance traffic loads across multiple servers

Which security framework component identifies, assesses, and prioritizes risks to an organization's assets?

• AIncident response
• BRisk management
• CDisaster recovery
• DChange management

What is the first step in the incident response lifecycle according to NIST?

• AContainment, Eradication, and Recovery
• BDetection and Analysis
• CPreparation
• DPost-Incident Activity

Which type of access control assigns permissions based on a user's role within the organization?

• ADiscretionary Access Control (DAC)
• BMandatory Access Control (MAC)
• CRole-Based Access Control (RBAC)
• DAttribute-Based Access Control (ABAC)

What is the primary purpose of antivirus software installed on an endpoint?

• ATo filter network traffic at the perimeter
• BTo detect, quarantine, and remove malicious software from the device
• CTo encrypt data stored on the hard drive
• DTo manage software patches and updates

A security analyst notices unusual outbound traffic from a workstation to an unknown IP address at 3 AM. What should the analyst do FIRST?

• AFormat and reimage the workstation immediately
• BIgnore it since it could be a scheduled backup
• CInvestigate and analyze the traffic to determine if it is malicious
• DDisconnect the entire network from the internet

Which encryption algorithm is considered the current standard for symmetric encryption and is used by the U.S. government?

• ADES
• B3DES
• CAES
• DRC4

What does a vulnerability scanner do?

• AExploits vulnerabilities to gain access to a system
• BIdentifies known security weaknesses in systems, software, and configurations
• CMonitors network traffic for signs of active attacks
• DEncrypts sensitive data to prevent unauthorized access

Which security concept involves separating duties among multiple people to prevent fraud or errors?

• ALeast privilege
• BSeparation of duties
• CDefense in depth
• DNeed to know

What is the primary function of a SIEM (Security Information and Event Management) system?

• ATo block malware at the network perimeter
• BTo collect, correlate, and analyze security event logs from multiple sources
• CTo encrypt data transmitted across the network
• DTo manage user accounts and permissions

During which phase of incident response is the primary goal to limit the damage and prevent the attack from spreading?

• APreparation
• BDetection and Analysis
• CContainment
• DPost-Incident Activity

Which protocol provides secure web browsing by encrypting HTTP traffic?

• AFTP
• BSSH
• CHTTPS
• DSNMP

What is the purpose of a hash function in cybersecurity?

• ATo encrypt data so it can be decrypted later
• BTo create a unique fixed-length fingerprint of data for integrity verification
• CTo compress data for efficient storage
• DTo generate random encryption keys

An organization discovers that an attacker has been inside their network for 6 months without detection. What is this time period called?

• AAttack surface
• BDwell time
• CRecovery time objective (RTO)
• DMean time to repair (MTTR)

What does the AAA framework stand for in network security?

• AAccess, Authorization, Auditing
• BAuthentication, Authorization, Accounting
• CAuthentication, Access, Administration
• DAccess, Authentication, Availability

Which security control provides multiple layers of defense so that if one layer fails, others continue to protect?

• ASingle sign-on
• BDefense in depth
• CLeast privilege
• DData loss prevention

A company's web server receives thousands of requests per second from multiple compromised computers, causing it to become unresponsive. What type of attack is this?

• ASQL injection
• BCross-site scripting (XSS)
• CDistributed Denial of Service (DDoS)
• DBrute force

What is the CVSS (Common Vulnerability Scoring System) used for?

• AEncrypting vulnerability reports for secure transmission
• BAssigning a numerical severity score to security vulnerabilities
• CAutomatically patching vulnerabilities on affected systems
• DClassifying malware into different categories

Which Windows feature provides full disk encryption to protect data on laptops and desktops?

• AWindows Defender
• BBitLocker
• CWindows Firewall
• DGroup Policy

What is the purpose of a digital certificate in cybersecurity?

• ATo compress data for faster network transmission
• BTo bind a public key to an entity's identity, verified by a trusted Certificate Authority
• CTo store encrypted passwords for user authentication
• DTo create a VPN tunnel between two networks

Which type of attack exploits a vulnerability in a web application to execute malicious SQL commands against the database?

• ACross-site scripting (XSS)
• BSQL injection
• CBuffer overflow
• DDNS poisoning

What type of security control is employee security awareness training?

• ATechnical control
• BPhysical control
• CAdministrative control
• DDetective control