CiscoCertified Support Technician (CCST) Cybersecurity
Domain 3Objective 2
Demonstrate Familiarity with Appropriate Endpoint Tools That Gather Security Assessment Information 100-160 Practice Questions (Page 2)
Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)
31questions here
7free pages
3concepts
Questions 6–10
- 6
A security analyst is investigating a workstation that is making repeated connections to a known malicious IP address. The analyst needs to determine if the workstation is currently connected to that IP and also verify the DNS name associated with that IP. Which two commands should be used?
Select an answer first - 7
A security analyst is investigating a phishing email that contains a link to 'http://192.0.2.10/update'. The analyst wants to determine if the IP address is associated with a known domain. Which command should be used?
Select an answer first - 8
A security analyst is investigating a phishing email that claims to be from a known vendor. The email contains a link to 'login.vendor-security.com'. The analyst wants to verify whether that hostname resolves to an IP address that is actually owned by the vendor. Which tool should be used first?
Select an answer first - 9
A security analyst is investigating a possible data exfiltration attempt. The analyst needs to see the actual payload of outbound packets to determine if sensitive data is being transmitted. Which tool should the analyst use?
Select an answer first - 10
A security analyst needs to verify that a company's web server hostname resolves to the correct IPv4 address. Which command is specifically designed to query DNS records for this purpose?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.