Which of the following is a common method used in a denial of service (DoS) attack?

Exploiting a software bug to gain remote access

Sending a large volume of traffic to overwhelm a server

Installing a keylogger to capture keystrokes

Sending phishing emails to trick users into revealing passwords

An employee receives an email that appears to be from the CEO, urgently requesting a wire transfer. The email includes a link to a login page that looks identical to the company's VPN portal. The employee enters their username and password, but no transfer is made. Which security control would have MOST effectively prevented the credential theft?

Blocking the sender's email address in the mail gateway

Requiring a one-time code from an authenticator app in addition to the password

Enforcing a 12-character password with special characters

Installing a host firewall on the employee's laptop

An employee receives an email that appears to be from the company's CEO, urgently requesting that the employee purchase gift cards and reply with the codes. The email address is slightly different from the CEO's real address. What type of attack is this, and what is the primary defense?

Spam; install a spam filter to block all messages from external domains

Trojan; run an antivirus scan on the employee's computer

Phishing; verify the sender's address and confirm the request through a known channel

Vishing; check the email headers for the originating IP address

A company is implementing MFA for all remote users. The security team wants to avoid sending SMS codes because of SIM-swapping risks. They also want to minimize the need for users to carry additional hardware. Which MFA method best meets these constraints?

Use biometric-only authentication

Use hardware security keys for every user

Use a push notification to a company-managed mobile device management (MDM) enrolled smartphone

CiscoCertified Support Technician (CCST) Networking

Domain 6Objective 2

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 5)

Part of the Security domain, which makes up ~13% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 21–25

21application · easy
A company stores customer data in a database. To protect the data from being read if the database file is stolen, the administrator encrypts the entire database file on disk. Which CIA triad component is this protecting?
Select an answer first
22foundation · easy
Which of the following is a common method used in a denial of service (DoS) attack?
Select an answer first
23application · medium
An employee receives an email that appears to be from the CEO, urgently requesting a wire transfer. The email includes a link to a login page that looks identical to the company's VPN portal. The employee enters their username and password, but no transfer is made. Which security control would have MOST effectively prevented the credential theft?
Select an answer first
24application · easy
An employee receives an email that appears to be from the company's CEO, urgently requesting that the employee purchase gift cards and reply with the codes. The email address is slightly different from the CEO's real address. What type of attack is this, and what is the primary defense?
Select an answer first
25expert · hard
A company is implementing MFA for all remote users. The security team wants to avoid sending SMS codes because of SIM-swapping risks. They also want to minimize the need for users to carry additional hardware. Which MFA method best meets these constraints?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 5)

Questions 21–25

A company stores customer data in a database. To protect the data from being read if the database file is stolen, the administrator encrypts the entire database file on disk. Which CIA triad component is this protecting?

Which of the following is a common method used in a denial of service (DoS) attack?

An employee receives an email that appears to be from the company's CEO, urgently requesting that the employee purchase gift cards and reply with the codes. The email address is slightly different from the CEO's real address. What type of attack is this, and what is the primary defense?

A company is implementing MFA for all remote users. The security team wants to avoid sending SMS codes because of SIM-swapping risks. They also want to minimize the need for users to carry additional hardware. Which MFA method best meets these constraints?

Keep studying — Security