A company is revising its password policy. The security team wants to prevent users from reusing passwords across systems and wants to reduce the risk of credential stuffing. Which policy is most effective?

Implement a minimum password length of 8 characters

Require users to change their password every 30 days

Use a password manager to generate and store unique, complex passwords for each system

Use a blacklist of common passwords

A company's online service is experiencing intermittent outages. The network team finds that the outages are caused by a flood of traffic from a single source IP address. The team wants to block the attack without affecting legitimate users. Which action is the MOST appropriate first step?

Increase the server's bandwidth to absorb the traffic

Ignore the traffic because it is from a single source

Disable the service until the attack stops

Configure the firewall to block the specific source IP address

A user visits a banking website and notices the browser displays a padlock icon. The user wants to ensure that the communication is encrypted and that the site is legitimate. What does the padlock icon indicate?

The site's IP address is hidden from the user

The site has a valid digital certificate and the connection is encrypted

The site has been verified to be free of malware

The site's content is guaranteed to be accurate

A healthcare organization must transmit patient records between two clinics over the internet. The compliance officer requires that the data be unreadable if intercepted, and that any tampering with the data during transmission be detectable. The organization also wants to ensure that the receiving server can verify the sender's identity. Which solution meets all three requirements?

Use HTTPS with client and server certificates

Use FTP with a username and password

Use email with digital signatures only

Use a VPN tunnel with pre-shared keys

A company has implemented email filtering and user training to reduce phishing. Despite this, a targeted phishing email bypasses the filter and tricks a user into revealing their credentials. The company wants to add a control that would prevent the attacker from using the stolen credentials, even if the user falls for the phishing email. Which control is MOST effective?

Block the phishing email's sender domain

Increase the frequency of password changes

Enforce MFA for all user accounts

CiscoCertified Support Technician (CCST) Networking

Domain 6Objective 2

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 4)

Part of the Security domain, which makes up ~13% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 16–20

16expert · hard
A company is revising its password policy. The security team wants to prevent users from reusing passwords across systems and wants to reduce the risk of credential stuffing. Which policy is most effective?
Select an answer first
17expert · hard
A company's online service is experiencing intermittent outages. The network team finds that the outages are caused by a flood of traffic from a single source IP address. The team wants to block the attack without affecting legitimate users. Which action is the MOST appropriate first step?
Select an answer first
18application · easy
A user visits a banking website and notices the browser displays a padlock icon. The user wants to ensure that the communication is encrypted and that the site is legitimate. What does the padlock icon indicate?
Select an answer first
19expert · hard
A healthcare organization must transmit patient records between two clinics over the internet. The compliance officer requires that the data be unreadable if intercepted, and that any tampering with the data during transmission be detectable. The organization also wants to ensure that the receiving server can verify the sender's identity. Which solution meets all three requirements?
Select an answer first
20expert · hard
A company has implemented email filtering and user training to reduce phishing. Despite this, a targeted phishing email bypasses the filter and tricks a user into revealing their credentials. The company wants to add a control that would prevent the attacker from using the stolen credentials, even if the user falls for the phishing email. Which control is MOST effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 4)

Questions 16–20

A company is revising its password policy. The security team wants to prevent users from reusing passwords across systems and wants to reduce the risk of credential stuffing. Which policy is most effective?

A company's online service is experiencing intermittent outages. The network team finds that the outages are caused by a flood of traffic from a single source IP address. The team wants to block the attack without affecting legitimate users. Which action is the MOST appropriate first step?

A user visits a banking website and notices the browser displays a padlock icon. The user wants to ensure that the communication is encrypted and that the site is legitimate. What does the padlock icon indicate?

Keep studying — Security