A Windows administrator needs to grant a user the ability to read and modify files in a shared folder, but not delete them. Which NTFS permission should be assigned?

Read & write with the 'Delete' permission explicitly denied

A company deploys both Windows and macOS endpoints. They want to enforce a policy that only approved applications can run, and all other executables should be blocked. Which built-in OS features should be used on each platform?

Windows Firewall and macOS Application Firewall

User Account Control (UAC) and macOS Parental Controls

Windows Defender Application Control (WDAC) and macOS Gatekeeper

Which built-in security feature is common to Windows, macOS, and Linux operating systems?

A built-in antivirus product that provides real-time protection out of the box

A graphical user interface for managing all security settings

A mandatory access control framework such as SELinux or AppArmor

A built-in host-based firewall that can filter incoming and outgoing network traffic

What is the primary role of a host-based firewall?

To encrypt data stored on the hard drive

To protect an entire corporate network from external threats

To detect and remove malware from the system

To filter network traffic to and from an individual device

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 1

Describe Operating System Security Concepts 100-160 Practice Questions (Page 2)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 6–10

6application · medium
A Windows administrator needs to grant a user the ability to read and modify files in a shared folder, but not delete them. Which NTFS permission should be assigned?
Select an answer first
7application · medium
A user reports that Windows Defender is not detecting a new malware variant. The admin suspects that real-time protection is disabled. Which PowerShell command should the admin run to verify the status of real-time protection?
Select an answer first
8application · medium
A company deploys both Windows and macOS endpoints. They want to enforce a policy that only approved applications can run, and all other executables should be blocked. Which built-in OS features should be used on each platform?
Select an answer first
9foundation · easy
Which built-in security feature is common to Windows, macOS, and Linux operating systems?
Select an answer first
10foundation · easy
What is the primary role of a host-based firewall?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.