Cisco Certified Support Technician (CCST) Cybersecurity 100-160 CCST Cybersecurity Exam Questions

Answer : C

The CCST Cybersecurity Study Guide specifies that AES (Advanced Encryption Standard) is the encryption method used in modern WiFi security protocols like WPA2 and WPA3.

'WPA2 and WPA3 use the Advanced Encryption Standard (AES) for securing wireless traffic. AES provides strong symmetric encryption, replacing outdated methods like WEP and TKIP.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security section, Cisco Networking Academy)

A (DES) is outdated and insecure.

B (Triple DES) is older and slower, rarely used in WiFi.

C is correct: AES is the industry standard for WiFi security.

D (RSA) is asymmetric encryption used in key exchange, not bulk WiFi encryption.

Answer : C

According to the CCST Cybersecurity Study Guide, firmware updates are a critical security maintenance task because vulnerabilities in firmware can be exploited by attackers to gain persistent control over hardware.

'Keeping firmware up to date is necessary to patch security vulnerabilities and weaknesses that could be exploited by threat actors. Vendors release firmware updates to correct security flaws, enhance stability, and ensure compatibility with updated security protocols.'

(CCST Cybersecurity, Endpoint Security Concepts, System and Firmware Maintenance section, Cisco Networking Academy)

A is partially true but not the primary security reason for updates.

B is incorrect because firmware is not part of the OS kernel; it's embedded in the hardware.

C is correct: patching vulnerabilities in firmware is essential for endpoint protection.

D may occur as a side benefit, but it's not the main reason from a cybersecurity perspective.

Answer : D

The CCST Cybersecurity Study Guide explains that WPA3 is the most current and secure Wi-Fi Protected Access protocol, offering stronger encryption and better protection against brute-force attacks compared to earlier versions.

'WPA3 improves wireless security by using more robust encryption methods and protections against offline password guessing, making it the recommended protocol for securing modern Wi-Fi networks.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security Protocols section, Cisco Networking Academy)

Answer : B

The CCST Cybersecurity Study Guide describes a man-in-the-middle (MITM) attack as an attack where the adversary secretly intercepts and possibly alters communications between two parties, making them believe they are communicating directly. A rogue AP configured to pass traffic through itself before sending it on is a classic wireless MITM method.

'In a MITM attack, the attacker places themselves between the sender and receiver, intercepting and possibly altering data in transit. Rogue access points can facilitate MITM attacks in wireless environments.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Threats section, Cisco Networking Academy)

A is incorrect: Reconnaissance is information gathering, not active interception.

B is correct: This is a wireless MITM attack.

C is incorrect: DDoS aims to overwhelm a service, not intercept data.

D is incorrect: Ransomware encrypts data for extortion.

Answer : D

The CCST Cybersecurity Study Guide highlights that SSH (Secure Shell) provides encrypted communication for secure remote access and file transfer (using SCP or SFTP) over unsecured networks. This ensures confidentiality and integrity of the files in transit.

'SSH encrypts all data exchanged between client and server, protecting credentials and file contents from interception. It is the preferred protocol for secure device management and file transfers across untrusted networks.'

(CCST Cybersecurity, Basic Network Security Concepts, Secure Remote Management section, Cisco Networking Academy)

A (Telnet) transmits data in plaintext.

B (HTTP) is unencrypted web traffic.

C (TFTP) is a simple, insecure file transfer protocol without encryption.

D is correct: SSH secures configuration file transfers across insecure networks.

Answer : C, D, E

The CCST Cybersecurity material states that a Virtual Private Network (VPN) provides secure communication over an untrusted network, typically by ensuring:

Authentication verifying the identity of the user/device

Confidentiality encrypting the data so it cannot be read by unauthorized parties

Integrity ensuring that transmitted data has not been altered in transit

'VPNs secure remote access by authenticating users, encrypting data for confidentiality, and ensuring integrity through cryptographic checks.'

(CCST Cybersecurity, Basic Network Security Concepts, VPNs section, Cisco Networking Academy)

A is incorrect: WAN management is a network administration function, not a VPN feature.

B is incorrect: Authorization is related but not a primary VPN security function.

C is correct: Integrity is preserved through cryptographic hashing.

D is correct: Authentication verifies user identity.

E is correct: Confidentiality is provided via encryption.

F is incorrect: Password management is separate from VPN functions.

Answer : A

The CCST Cybersecurity course identifies Windows PowerShell as both a command-line interface (CLI) and a robust scripting environment. It is used by system administrators for automation, configuration, and task scheduling.

'PowerShell is a Windows command-line shell and scripting language built on the .NET framework. It allows administrators to automate administrative tasks, manage system configurations, and execute complex scripts for system management.'

(CCST Cybersecurity, Endpoint Security Concepts, System Administration Tools section, Cisco Networking Academy)

A is correct: PowerShell provides both interactive command execution and scripting capabilities.

B (MMC) is a GUI-based management console, not a CLI.

C (Vim) is a text editor, not a Windows-native CLI.

D (MS-DOS) is a legacy command shell with no advanced scripting features comparable to PowerShell.