An organization wants to reduce bandwidth usage and improve response times for frequently accessed websites, while also hiding the internal IP addresses of users from external servers. Which technology should be deployed?

Reverse proxy server with SSL termination

Network-based intrusion detection system

Virtual private network (VPN) concentrator

Forward proxy server with caching

A security team has deployed a honeypot in a DMZ. They notice that an attacker has compromised the honeypot and is using it to scan the internal network. The team wants to gather more intelligence about the attacker's methods without risking the internal network. What should they do?

Redirect the attacker's traffic to a second honeypot on the internal network.

Allow the attacker to continue but monitor all activity and ensure the honeypot is isolated from the internal network.

Use the honeypot to launch a counterattack against the attacker.

Immediately shut down the honeypot to stop the attack.

A company runs a virtualized environment with multiple VMs on a single host. They want to protect against a compromised VM launching attacks on other VMs. Which security measure should they implement?

Use a virtual firewall or distributed firewall to filter traffic between VMs.

Use a physical firewall only at the network perimeter.

Place all VMs on the same virtual switch.

Disable the hypervisor's network interface.

What is the primary purpose of a DMZ in a network architecture?

To host public-facing services while isolating them from the internal network

To store backup data for disaster recovery

To monitor and log all internal user activity

To provide a secure area for internal users to access the internet

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 3

Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 3)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 11–15

11application · easy
An organization wants to reduce bandwidth usage and improve response times for frequently accessed websites, while also hiding the internal IP addresses of users from external servers. Which technology should be deployed?
Select an answer first
12foundation · easy
In a virtualized environment, which component is responsible for isolating virtual machines from each other?
Select an answer first
13expert · hard
A security team has deployed a honeypot in a DMZ. They notice that an attacker has compromised the honeypot and is using it to scan the internal network. The team wants to gather more intelligence about the attacker's methods without risking the internal network. What should they do?
Select an answer first
14application · medium
A company runs a virtualized environment with multiple VMs on a single host. They want to protect against a compromised VM launching attacks on other VMs. Which security measure should they implement?
Select an answer first
15foundation · easy
What is the primary purpose of a DMZ in a network architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.