A company is implementing MFA for remote access. The security team wants to use a factor that is resistant to phishing and does not require users to carry a separate physical device. Which factor best meets these constraints?

A security question such as 'mother's maiden name'

A push notification to a smartphone app that requires biometric approval

A hardware token that displays a rotating code

A one-time password sent via SMS

A company wants to enforce strong passwords for all users. The current password policy requires 8 characters with at least one number. The security team wants to increase resistance to brute-force attacks while minimizing user frustration. Which policy change best balances security and usability?

Increase minimum length to 14 characters and allow passphrases

Require at least one special character and one uppercase letter

Use a blacklist of common passwords

Require a new password every 30 days

A company wants to strengthen access to its VPN. Currently, users log in with a username and password. The security team wants to add a second factor that is something the user has. Which option satisfies this requirement?

Require the user to enter a biometric fingerprint scan

Require a one-time passcode generated by an authenticator app on the user's smartphone

Require the user to answer a set of personal security questions

Require the user to change their password every 30 days

What is the primary purpose of an identity store in a network?

To provide a backup of all network traffic

To store encrypted data files for users

To centrally manage user accounts, credentials, and authentication information

To encrypt all communications between clients and servers

A company's e-commerce website becomes unresponsive during a product launch. The network team observes a massive number of incoming requests from many different IP addresses, overwhelming the server. Which type of attack is this, and which aspect of the CIA triad is primarily affected?

Man-in-the-middle attack; confidentiality

Distributed denial of service (DDoS); availability

CiscoCertified Support Technician (CCST) Networking

Domain 6Objective 2

6.2. Describe Foundational Security Concepts. 100-150 Practice Questions (Page 7)

Part of the Security domain, which makes up ~13% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 31–35

31expert · hard
A company is implementing MFA for remote access. The security team wants to use a factor that is resistant to phishing and does not require users to carry a separate physical device. Which factor best meets these constraints?
Select an answer first
32expert · hard
A company wants to enforce strong passwords for all users. The current password policy requires 8 characters with at least one number. The security team wants to increase resistance to brute-force attacks while minimizing user frustration. Which policy change best balances security and usability?
Select an answer first
33application · easy
A company wants to strengthen access to its VPN. Currently, users log in with a username and password. The security team wants to add a second factor that is something the user has. Which option satisfies this requirement?
Select an answer first
34foundation · easy
What is the primary purpose of an identity store in a network?
Select an answer first
35application · medium
A company's e-commerce website becomes unresponsive during a product launch. The network team observes a massive number of incoming requests from many different IP addresses, overwhelming the server. Which type of attack is this, and which aspect of the CIA triad is primarily affected?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.