A company is considering moving its on-premises virtualized workloads to a public cloud. The security team is concerned about the risk of other tenants compromising the hypervisor and accessing their VMs. Which approach best addresses this concern?

Choose a cloud provider that offers strong hypervisor isolation and attestation, and implement additional encryption and network segmentation within the customer's virtual network.

Use a public cloud but disable all virtualization features to ensure VMs run on bare metal.

Move the workloads to a private cloud built on dedicated hardware, which eliminates all multi-tenant risks.

Avoid the public cloud entirely and keep all workloads on-premises because public cloud cannot meet security requirements.

What is the primary purpose of a honeypot in network security?

To replace a firewall in the network

To block all malicious traffic before it reaches the network

To attract attackers and analyze their behavior

A company wants to control which websites employees can access and also cache frequently visited pages to reduce bandwidth usage. The security team needs a device that sits between users and the internet, evaluates each request against a policy, and can store copies of web content. Which technology should they deploy?

Network address translation (NAT) device

Intrusion prevention system (IPS)

How does an IPS typically prevent a detected attack?

By rebooting the affected server

By encrypting the malicious traffic

By sending an alert to the administrator and taking no further action

By dropping or blocking the malicious packets in real-time

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 3

Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 5)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 21–25

21expert · hard
A company is considering moving its on-premises virtualized workloads to a public cloud. The security team is concerned about the risk of other tenants compromising the hypervisor and accessing their VMs. Which approach best addresses this concern?
Select an answer first
22foundation · easy
What is the primary purpose of a honeypot in network security?
Select an answer first
23application · medium
A company wants to control which websites employees can access and also cache frequently visited pages to reduce bandwidth usage. The security team needs a device that sits between users and the internet, evaluates each request against a policy, and can store copies of web content. Which technology should they deploy?
Select an answer first
24foundation · easy
How does an IPS typically prevent a detected attack?
Select an answer first
25application · easy
A security analyst wants to detect attackers who are scanning the network for vulnerable services. They deploy a system that emulates multiple services and logs all connection attempts. What is this system called?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 5)

Questions 21–25

A company is considering moving its on-premises virtualized workloads to a public cloud. The security team is concerned about the risk of other tenants compromising the hypervisor and accessing their VMs. Which approach best addresses this concern?

What is the primary purpose of a honeypot in network security?

How does an IPS typically prevent a detected attack?

A security analyst wants to detect attackers who are scanning the network for vulnerable services. They deploy a system that emulates multiple services and logs all connection attempts. What is this system called?

Keep studying — Basic Network Security Concepts