What is the primary benefit of using a password manager?

It encrypts the user's entire hard drive

It automatically logs the user into all websites without any authentication

It prevents all phishing attacks

It generates and stores unique, complex passwords for each account

A user receives an unsolicited email advertising a 'limited-time offer' for a free gift card. The email contains a link to a website that asks for personal information. What is the primary risk of interacting with this email?

It will definitely infect the computer with a virus

It may contain phishing links that steal credentials

It will overload the email server

It is harmless and can be ignored

A user receives an email that appears to be from a shipping company, with a link to 'track your package.' The user did not order anything recently. What is the most likely threat?

A legitimate notification from the shipping company

A user receives an email that appears to be from their CEO, asking for a wire transfer to a new vendor. The email's domain is slightly misspelled (e.g., 'company.co' instead of 'company.com'). What is the most likely threat and the best response?

Email spoofing; verify the request by calling the CEO directly.

A legitimate request; the CEO often uses alternate domains.

DNS spoofing; check the company's DNS records.

Spear phishing; reply to the email asking for more details.

What is the purpose of documenting findings during a basic security investigation?

To create a public report of the incident

To provide a record that can be used by the security team for analysis and response

To prove that the user was not at fault

To satisfy legal requirements in all cases

CiscoCertified Support Technician (CCST) IT Support

Domain 5Objective 1

5.1. Describe Security Threats to the End User, Perform Basic Investigation, and Escalate to the Appropriate Team. 100-140 Practice Questions (Page 4)

Part of the Common Threats and Preventions domain, which makes up ~12% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

Questions 16–20

16foundation · easy
What is the primary benefit of using a password manager?
Select an answer first
17foundation · easy
A user receives an unsolicited email advertising a 'limited-time offer' for a free gift card. The email contains a link to a website that asks for personal information. What is the primary risk of interacting with this email?
Select an answer first
18application · medium
A user receives an email that appears to be from a shipping company, with a link to 'track your package.' The user did not order anything recently. What is the most likely threat?
Select an answer first
19expert · hard
A user receives an email that appears to be from their CEO, asking for a wire transfer to a new vendor. The email's domain is slightly misspelled (e.g., 'company.co' instead of 'company.com'). What is the most likely threat and the best response?
Select an answer first
20foundation · easy
What is the purpose of documenting findings during a basic security investigation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-140

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-140” is a trademark of its owner, used for identification only.