An employee receives an email that appears to be from a shipping company, with an attachment named 'invoice.exe'. The employee opens the attachment, and the computer begins encrypting files and displaying a ransom note. Which two security controls would have MOST effectively prevented this outcome?

Email filtering that blocks executable attachments and user training on phishing awareness

A host firewall and disabling USB ports

A strong password policy and MFA for email access

Regular backups and a screen saver password

Which of the following password characteristics best demonstrates the principle of password complexity?

Using a password that is a common word like 'password'

Using the same password for multiple accounts

Using a long password with a mix of uppercase, lowercase, numbers, and symbols

Using a short password that is easy to remember

A company stores customer records in a database and also sends nightly backups to an off-site cloud storage bucket. The security team wants to protect the data if the backup media is stolen and also ensure that the data is unreadable if an attacker gains access to the database server. Which approach satisfies both requirements?

Implement role-based access control on the database

Encrypt the database files and the backup storage bucket

Install an intrusion detection system on the network

Use a VPN for all database administration traffic

A company's web application is accessed by customers over the internet. The application currently uses HTTP. A security assessment reveals that customer data is being transmitted in plaintext and that the server's identity is not verified by clients. The company wants to fix both issues with minimal disruption to users. Which action should the company take?

Implement a custom encryption protocol on the application layer

Require customers to use a VPN to access the application

Use a self-signed certificate and distribute it to all customers

Obtain a certificate from a public CA and configure the web server to use HTTPS

CiscoCertified Support Technician (CCST) Networking

Domain 6Objective 2

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 10)

Part of the Security domain, which makes up ~13% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 46–50

46application · medium
An employee receives an email that appears to be from a shipping company, with an attachment named 'invoice.exe'. The employee opens the attachment, and the computer begins encrypting files and displaying a ransom note. Which two security controls would have MOST effectively prevented this outcome?
Select an answer first
47foundation · easy
Which of the following password characteristics best demonstrates the principle of password complexity?
Select an answer first
48application · medium
A company stores customer records in a database and also sends nightly backups to an off-site cloud storage bucket. The security team wants to protect the data if the backup media is stolen and also ensure that the data is unreadable if an attacker gains access to the database server. Which approach satisfies both requirements?
Select an answer first
49expert · hard
A company's web application is accessed by customers over the internet. The application currently uses HTTP. A security assessment reveals that customer data is being transmitted in plaintext and that the server's identity is not verified by clients. The company wants to fix both issues with minimal disruption to users. Which action should the company take?
Select an answer first
50foundation · easy
A database administrator notices that a user's salary record was changed from $50,000 to $80,000 without authorization. Which component of the CIA triad was directly violated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 10)

Questions 46–50

An employee receives an email that appears to be from a shipping company, with an attachment named 'invoice.exe'. The employee opens the attachment, and the computer begins encrypting files and displaying a ransom note. Which two security controls would have MOST effectively prevented this outcome?

Which of the following password characteristics best demonstrates the principle of password complexity?

A database administrator notices that a user's salary record was changed from $50,000 to $80,000 without authorization. Which component of the CIA triad was directly violated?

Keep studying — Security