A small business hosts its website on a single server. During a DDoS attack, the server becomes overwhelmed and the website is unavailable. The business wants to improve availability without purchasing new hardware. Which approach is most effective?

Move the website to a cloud-based DDoS protection service that filters traffic before it reaches the origin server

Configure the firewall to block all incoming traffic during the attack

Disable the website's public DNS records

Increase the server's bandwidth and CPU resources

A company uses Active Directory (AD) to manage user access. A new security policy requires that all administrative actions be logged and that users be granted the minimum permissions necessary. Which AD feature directly supports both requirements?

Password complexity policy and account lockout

Audit policy and Role-Based Access Control (RBAC) via AD groups

DNS zone transfers and DHCP reservations

Kerberos delegation and service accounts

Why are strong passwords essential for security?

They make it significantly harder for attackers to guess or crack the password

They ensure that data is encrypted at all times

They prevent all types of malware infections

They eliminate the need for other security measures like firewalls

A company uses Active Directory for authentication. An administrator wants to implement MFA for all users. The company has a mix of on-premises and cloud applications. Which approach provides the most consistent MFA experience?

Require users to use a VPN for all access

Implement MFA only for cloud applications

Use a cloud-based identity provider that integrates with AD and supports MFA for both on-premises and cloud apps

Use a separate MFA solution for each application

CiscoCertified Support Technician (CCST) Networking

Domain 6Objective 2

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 3)

Part of the Security domain, which makes up ~13% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 11–15

11expert · hard
A small business hosts its website on a single server. During a DDoS attack, the server becomes overwhelmed and the website is unavailable. The business wants to improve availability without purchasing new hardware. Which approach is most effective?
Select an answer first
12expert · hard
A company uses Active Directory (AD) to manage user access. A new security policy requires that all administrative actions be logged and that users be granted the minimum permissions necessary. Which AD feature directly supports both requirements?
Select an answer first
13foundation · easy
Why are strong passwords essential for security?
Select an answer first
14foundation · easy
Which type of malware is designed to spread from one computer to another without requiring user interaction?
Select an answer first
15expert · hard
A company uses Active Directory for authentication. An administrator wants to implement MFA for all users. The company has a mix of on-premises and cloud applications. Which approach provides the most consistent MFA experience?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.