A company is standardizing on Linux for its new employee workstations. The security team wants to enforce that users cannot modify system files, that only authorized software can run, and that network services are restricted. Which combination of built-in Linux features should be used?

SELinux, file permissions, and iptables

A user on a Linux system complains that they cannot read a project file owned by another user. The file permissions are -rw-r----- and the file's group is 'project'. The user is a member of the 'project' group. What is the most likely reason the user cannot read the file?

The file is owned by root and only root can read it

The user's current shell session does not include the 'project' group membership

The file's group permissions are set to read-only, which prevents reading

The file has an extended ACL denying read access

A Windows 11 workstation in a small office has been flagged by the central monitoring system for repeated failed login attempts and unusual outbound connections. The user reports that the system is running slowly. The IT admin wants to immediately check for active threats and block any malicious network traffic without installing third-party software. Which two built-in Windows features should the admin use together?

BitLocker Drive Encryption and User Account Control

Task Scheduler and Event Viewer

Windows Defender Antivirus and Windows Defender Firewall

Windows Sandbox and Credential Guard

A Linux server has both iptables and firewalld installed. The administrator added a rule using iptables directly, but after rebooting the server, the rule is gone. The administrator wants the rule to persist across reboots. Which action should be taken?

Place the iptables command in /etc/rc.local

Use iptables-save > /etc/iptables.rules and rely on the kernel to load it automatically

Re-add the rule using firewall-cmd --add-rich-rule

Save the iptables rules with iptables-save and restore them via a systemd service or iptables-persistent package

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 1

Describe Operating System Security Concepts 100-160 Practice Questions (Page 3)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 11–15

11expert · hard
A company is standardizing on Linux for its new employee workstations. The security team wants to enforce that users cannot modify system files, that only authorized software can run, and that network services are restricted. Which combination of built-in Linux features should be used?
Select an answer first
12foundation · easy
Which command-line interface is native to macOS and Linux for performing security-related tasks?
Select an answer first
13application · medium
A user on a Linux system complains that they cannot read a project file owned by another user. The file permissions are -rw-r----- and the file's group is 'project'. The user is a member of the 'project' group. What is the most likely reason the user cannot read the file?
Select an answer first
14application · medium
A Windows 11 workstation in a small office has been flagged by the central monitoring system for repeated failed login attempts and unusual outbound connections. The user reports that the system is running slowly. The IT admin wants to immediately check for active threats and block any malicious network traffic without installing third-party software. Which two built-in Windows features should the admin use together?
Select an answer first
15expert · hard
A Linux server has both iptables and firewalld installed. The administrator added a rule using iptables directly, but after rebooting the server, the rule is gone. The administrator wants the rule to persist across reboots. Which action should be taken?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Describe Operating System Security Concepts 100-160 Practice Questions (Page 3)

Questions 11–15

A company is standardizing on Linux for its new employee workstations. The security team wants to enforce that users cannot modify system files, that only authorized software can run, and that network services are restricted. Which combination of built-in Linux features should be used?

Which command-line interface is native to macOS and Linux for performing security-related tasks?

A user on a Linux system complains that they cannot read a project file owned by another user. The file permissions are -rw-r----- and the file's group is 'project'. The user is a member of the 'project' group. What is the most likely reason the user cannot read the file?

A Linux server has both iptables and firewalld installed. The administrator added a rule using iptables directly, but after rebooting the server, the rule is gone. The administrator wants the rule to persist across reboots. Which action should be taken?

Keep studying — Endpoint Security Concepts