In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the cloud customer?

Replacing failed hardware in the cloud provider's data center

Managing access to data stored in the cloud

Physical security of the data center

A small company is migrating its internal file server to a virtual machine on a hypervisor that also hosts other production VMs. The security team is concerned about the risk of a compromised VM attacking other VMs on the same host. Which combination of measures would most effectively reduce this risk?

Disable all virtual switches and use only host-only networking for all VMs.

Move the file server to a public cloud VM and rely on the cloud provider's default security settings.

Install a host-based IDS on the file server VM and monitor logs, but keep it on the same virtual network as other VMs.

Place the file server VM on a separate virtual network with strict firewall rules between virtual networks, and ensure the hypervisor is patched and hardened.

A company wants to protect its internal web application from external attacks while also hiding the internal server's IP address. The solution must also provide caching to reduce load on the application servers. Which technology should they deploy?

Virtual private network (VPN) concentrator

Intrusion prevention system (IPS)

A company is using a public cloud provider for its web application. They want to monitor for suspicious activity in their cloud environment, such as unauthorized API calls or unusual login patterns. Which service or feature should they enable?

A honeypot deployed in the cloud.

Cloud provider's audit logging and monitoring service.

A traditional network-based IDS deployed on-premises.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 3

Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 7)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 31–35

31foundation · easy
In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the cloud customer?
Select an answer first
32expert · hard
A small company is migrating its internal file server to a virtual machine on a hypervisor that also hosts other production VMs. The security team is concerned about the risk of a compromised VM attacking other VMs on the same host. Which combination of measures would most effectively reduce this risk?
Select an answer first
33foundation · easy
Which cloud deployment model is characterized by infrastructure that is provisioned for exclusive use by a single organization?
Select an answer first
34expert · hard
A company wants to protect its internal web application from external attacks while also hiding the internal server's IP address. The solution must also provide caching to reduce load on the application servers. Which technology should they deploy?
Select an answer first
35application · medium
A company is using a public cloud provider for its web application. They want to monitor for suspicious activity in their cloud environment, such as unauthorized API calls or unusual login patterns. Which service or feature should they enable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Describe Network Infrastructure and Technologies 100-160 Practice Questions (Page 7)

Questions 31–35

In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the cloud customer?

Which cloud deployment model is characterized by infrastructure that is provisioned for exclusive use by a single organization?

A company wants to protect its internal web application from external attacks while also hiding the internal server's IP address. The solution must also provide caching to reduce load on the application servers. Which technology should they deploy?

A company is using a public cloud provider for its web application. They want to monitor for suspicious activity in their cloud environment, such as unauthorized API calls or unusual login patterns. Which service or feature should they enable?

Keep studying — Basic Network Security Concepts