In a defense-in-depth security architecture, which of the following best describes the purpose of network segmentation?

To combine all network traffic into a single broadcast domain for easier monitoring

To replace the need for firewalls by using a single flat network with strong encryption

To isolate different parts of the network so that a compromise in one segment does not automatically spread to others

To ensure that all devices in the network share the same security policy

Which of the following is a common characteristic of a honeypot?

It is placed in the internal network without any monitoring

It is isolated and monitored to capture attacker activity

It is designed to automatically block all incoming connections

It is heavily patched and hardened to resist attacks

Which of the following is the primary purpose of defense-in-depth in network security?

To ensure that all network traffic is encrypted end-to-end

To rely on a single strong security control to protect the entire network

To eliminate the need for user training by automating all security decisions

To provide multiple layers of security so that if one control fails, others still provide protection

What is a primary function of a proxy server in a network?

To encrypt all data stored on the network

To block all inbound traffic from the internet

To act as an intermediary between clients and servers, forwarding requests and responses

To provide a direct connection between two internal hosts

An organization wants to host a public web server and an email server that must be accessible from the internet. They also want to protect their internal network from attacks targeting these servers. Which architecture should they implement?

Place both servers on a separate VLAN without any firewall.

Place both servers in a DMZ and use a firewall to allow only necessary traffic to the internal network.

Place the web server in the DMZ and the email server on the internal network.

Place both servers on the internal network and use a firewall to block all inbound traffic.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 3

Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 1)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 1–5

1foundation · easy
In a defense-in-depth security architecture, which of the following best describes the purpose of network segmentation?
Select an answer first
2foundation · easy
Which of the following is a common characteristic of a honeypot?
Select an answer first
3foundation · easy
Which of the following is the primary purpose of defense-in-depth in network security?
Select an answer first
4foundation · easy
What is a primary function of a proxy server in a network?
Select an answer first
5application · medium
An organization wants to host a public web server and an email server that must be accessible from the internet. They also want to protect their internal network from attacks targeting these servers. Which architecture should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.