A Windows admin needs to grant a user the ability to reset passwords for other users in a specific OU, but not have full administrative rights. Which PowerShell approach should the admin use?

Use Set-ADUser with -PasswordNeverExpires

Use Get-ADUser to find the user and then modify the ACL

Use the Delegation of Control Wizard to delegate password reset permissions

Add the user to the Domain Admins group

Which of the following is a common method used to achieve privilege escalation?

Disabling the host-based firewall

Using a strong password for the administrator account

Exploiting a vulnerable service running with elevated privileges

Enabling full-disk encryption on the system

A company uses a mix of Windows, macOS, and Linux workstations. The security policy requires that all workstations enforce a host-based firewall and that users cannot modify system files. Which built-in features should be enabled on each OS?

Windows Defender Firewall, macOS Application Firewall, and iptables/nftables on Linux

Windows Defender Antivirus, macOS Gatekeeper, and Linux SELinux

User Account Control, sudo, and chmod

A security analyst is responding to a malware infection on a Windows workstation. The malware is known to disable Windows Defender and modify firewall rules. The analyst needs to ensure that Defender is re-enabled and that the firewall is restored to a secure state. Which approach should the analyst take?

Manually edit the Windows registry to re-enable Defender

Use System Restore to revert to a previous point

Use PowerShell to re-enable Defender and reset firewall rules to default

A Windows administrator wants to check the current status of Windows Defender real-time protection on a remote workstation using PowerShell. Which cmdlet should be used?

Get-WindowsFeature Windows-Defender

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 1

Describe Operating System Security Concepts 100-160 Practice Questions (Page 7)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 31–35

31expert · hard
A Windows admin needs to grant a user the ability to reset passwords for other users in a specific OU, but not have full administrative rights. Which PowerShell approach should the admin use?
Select an answer first
32foundation · easy
Which of the following is a common method used to achieve privilege escalation?
Select an answer first
33application · medium
A company uses a mix of Windows, macOS, and Linux workstations. The security policy requires that all workstations enforce a host-based firewall and that users cannot modify system files. Which built-in features should be enabled on each OS?
Select an answer first
34expert · hard
A security analyst is responding to a malware infection on a Windows workstation. The malware is known to disable Windows Defender and modify firewall rules. The analyst needs to ensure that Defender is re-enabled and that the firewall is restored to a secure state. Which approach should the analyst take?
Select an answer first
35application · medium
A Windows administrator wants to check the current status of Windows Defender real-time protection on a remote workstation using PowerShell. Which cmdlet should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.