A security analyst is investigating a Windows workstation where a standard user ran a script that modified system registry keys without prompting for credentials. The analyst suspects a privilege escalation vulnerability. Which combination of findings would most strongly support this conclusion?

The script used PowerShell to call Set-ItemProperty on HKCU registry keys

The script was executed from a network share and used cmd.exe

The user had previously installed a signed application that created a scheduled task

The script ran with an elevated token because the user had SeDebugPrivilege enabled

A penetration tester is assessing a Windows workstation. The tester has a standard user account and discovers that the system has a vulnerable service running as SYSTEM. The tester wants to exploit this to gain elevated privileges. Which mitigation would be most effective to prevent this type of privilege escalation?

Enable User Account Control (UAC) with default settings

Change the service to run as a standard user

Apply the latest security patches to the vulnerable service

A Windows user reports that Windows Defender is not scanning files that are copied to a USB drive. The administrator suspects that the drive is excluded from scans. Which PowerShell cmdlet should be used to review the exclusion list?

Get-ChildItem -Path 'HKLM:\SOFTWARE\Microsoft\Windows Defender\Exclusions'

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 1

Describe Operating System Security Concepts 100-160 Practice Questions (Page 1)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 1–5

1foundation · easy
Which operating system includes a built-in feature called FileVault that encrypts the entire disk?
Select an answer first
2expert · hard
A security analyst is investigating a Windows workstation where a standard user ran a script that modified system registry keys without prompting for credentials. The analyst suspects a privilege escalation vulnerability. Which combination of findings would most strongly support this conclusion?
Select an answer first
3foundation · easy
In Linux, which command is used to change the permissions of a file or directory?
Select an answer first
4expert · hard
A penetration tester is assessing a Windows workstation. The tester has a standard user account and discovers that the system has a vulnerable service running as SYSTEM. The tester wants to exploit this to gain elevated privileges. Which mitigation would be most effective to prevent this type of privilege escalation?
Select an answer first
5application · medium
A Windows user reports that Windows Defender is not scanning files that are copied to a USB drive. The administrator suspects that the drive is excluded from scans. Which PowerShell cmdlet should be used to review the exclusion list?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Describe Operating System Security Concepts 100-160 Practice Questions (Page 1)

Questions 1–5

Which operating system includes a built-in feature called FileVault that encrypts the entire disk?

A security analyst is investigating a Windows workstation where a standard user ran a script that modified system registry keys without prompting for credentials. The analyst suspects a privilege escalation vulnerability. Which combination of findings would most strongly support this conclusion?

In Linux, which command is used to change the permissions of a file or directory?

A Windows user reports that Windows Defender is not scanning files that are copied to a USB drive. The administrator suspects that the drive is excluded from scans. Which PowerShell cmdlet should be used to review the exclusion list?

Keep studying — Endpoint Security Concepts