A hospital stores patient records in a database. The database is encrypted at rest, and backups are also encrypted. The hospital wants to ensure that patient records are not altered without authorization. Which additional control is most directly needed?

Implement database audit logging and integrity checks (e.g., hashing)

Implement a DDoS protection service

Increase the database server's processing power

Add more encryption to the network traffic

A company is migrating from local accounts on each workstation to a centralized identity store. The administrator wants to ensure that when a user changes their password, it takes effect across all systems, and that access to resources is based on group membership. Which solution should the administrator choose?

Use a cloud-based password manager for each user

Create a script to synchronize local accounts across all computers

Deploy Active Directory with Group Policy and domain-join all computers

Use the same password for all local accounts

A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user is suspicious because the email asks for their password. The user's company has a policy that no legitimate organization will ask for passwords via email. What is the best course of action?

Click the link but do not enter any information

Forward the email to the bank's customer service

Reply to the email asking for verification

Report the email to the IT security team and delete it

A company uses Active Directory for employee logins. After a security review, the CISO wants to ensure that only users in the 'Finance' group can access the accounting application, and that every successful login is recorded with the username and timestamp. Which two actions, when combined, satisfy both requirements?

Assign the Finance group a strong password policy and enable password expiration

Require MFA for all users and disable guest accounts

Configure the application to check group membership and enable AD auditing of logon events

Put the accounting server in a separate VLAN and block all inbound traffic

CiscoCertified Support Technician (CCST) Networking

Domain 6Objective 2

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 6)

Part of the Security domain, which makes up ~13% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 26–30

26expert · hard
A hospital stores patient records in a database. The database is encrypted at rest, and backups are also encrypted. The hospital wants to ensure that patient records are not altered without authorization. Which additional control is most directly needed?
Select an answer first
27expert · hard
A company is migrating from local accounts on each workstation to a centralized identity store. The administrator wants to ensure that when a user changes their password, it takes effect across all systems, and that access to resources is based on group membership. Which solution should the administrator choose?
Select an answer first
28expert · medium
A user receives an email that appears to be from their bank, asking them to click a link and verify their account details. The user is suspicious because the email asks for their password. The user's company has a policy that no legitimate organization will ask for passwords via email. What is the best course of action?
Select an answer first
29application · medium
A company uses Active Directory for employee logins. After a security review, the CISO wants to ensure that only users in the 'Finance' group can access the accounting application, and that every successful login is recorded with the username and timestamp. Which two actions, when combined, satisfy both requirements?
Select an answer first
30expert · hard
A user downloads a file from a peer-to-peer network. The file appears to be a free video player, but when run, it installs a backdoor and also sends copies of itself to the user's contacts via email. Which type of malware is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 6)

Questions 26–30

A hospital stores patient records in a database. The database is encrypted at rest, and backups are also encrypted. The hospital wants to ensure that patient records are not altered without authorization. Which additional control is most directly needed?

A user downloads a file from a peer-to-peer network. The file appears to be a free video player, but when run, it installs a backdoor and also sends copies of itself to the user's contacts via email. Which type of malware is this?

Keep studying — Security