Which of the following best describes how an IDS typically operates?

It encrypts traffic between two networks

It blocks all traffic from unknown IP addresses

It sits inline and drops malicious packets

It receives a copy of traffic and analyzes it without affecting the flow

A company runs multiple virtual servers on a single hypervisor. The security team wants to ensure that if one VM is compromised, the attacker cannot easily access other VMs on the same host. Which control is most directly effective?

Disable the hypervisor's management interface.

Configure separate virtual networks for different VM groups and enforce firewall rules between them.

Install antivirus software on each VM.

Use the same virtual switch for all VMs to simplify management.

A network administrator has deployed a security device that monitors traffic on the core switch and generates alerts when it detects suspicious patterns, such as port scans. The device does not block any traffic; it only logs and alerts. Which type of device is this?

Intrusion detection system (IDS)

Intrusion prevention system (IPS)

A company uses a hybrid cloud model. They have a legacy application on-premises that cannot be moved to the cloud, and they want to use a cloud-based proxy to filter outbound internet traffic from all users, both on-premises and in the cloud. Which approach should they take?

Route all outbound traffic from both locations through a cloud-based proxy using VPN or dedicated connections.

Move the legacy application to the cloud to simplify the architecture.

Deploy a separate proxy in each location and manage them independently.

Use the cloud provider's native security groups to filter outbound traffic.

In a typical network with a DMZ, where is a public web server usually placed?

In the internal network, but with a VPN for external access

On the internal network with no firewall protection

In the internal network, protected by a single firewall

In the DMZ, between the external and internal firewalls

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 3

Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 2)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 6–10

6foundation · easy
Which of the following best describes how an IDS typically operates?
Select an answer first
7application · medium
A company runs multiple virtual servers on a single hypervisor. The security team wants to ensure that if one VM is compromised, the attacker cannot easily access other VMs on the same host. Which control is most directly effective?
Select an answer first
8application · medium
A network administrator has deployed a security device that monitors traffic on the core switch and generates alerts when it detects suspicious patterns, such as port scans. The device does not block any traffic; it only logs and alerts. Which type of device is this?
Select an answer first
9expert · hard
A company uses a hybrid cloud model. They have a legacy application on-premises that cannot be moved to the cloud, and they want to use a cloud-based proxy to filter outbound internet traffic from all users, both on-premises and in the cloud. Which approach should they take?
Select an answer first
10foundation · easy
In a typical network with a DMZ, where is a public web server usually placed?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.