A Windows server has a folder containing sensitive HR documents. The HR manager needs to read and modify files, but the IT support team should only be able to read them. The admin wants to use the least privilege model. What should the admin do?

Create two groups, grant Modify to HR and Read to IT, and assign the appropriate users to each group

Use the icacls command to grant Modify to the HR manager only

Disable inheritance and copy the folder to a new location

Grant Full Control to the HR manager and Read to everyone else

A Linux server has a directory /var/www/html that is owned by root. The web server runs as the user 'www-data' and needs to write to this directory. Which command should the admin run to give the web server write access while maintaining security?

chown www-data:www-data /var/www/html

chmod 775 /var/www/html and add www-data to the root group

A Linux administrator needs to allow a specific user 'alice' to read a file that is owned by root and has permissions 640 root:root. The administrator does not want to change the file's owner or group. Which approach is the most appropriate?

Use setfacl to add an ACL entry: setfacl -m u:alice:r file

Use sudo to run a script as root that copies the file to alice's home directory

Change the file permissions to 644

A macOS administrator needs to ensure that a specific application can access files in the user's Desktop folder. The application is not currently listed in System Settings > Privacy & Security > Files and Folders. What should the administrator do?

Add the application to the 'Full Disk Access' list

Disable System Integrity Protection (SIP)

Change the Desktop folder permissions to 777

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 1

Describe Operating System Security Concepts 100-160 Practice Questions (Page 8)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 36–40

36application · medium
A Windows server has a folder containing sensitive HR documents. The HR manager needs to read and modify files, but the IT support team should only be able to read them. The admin wants to use the least privilege model. What should the admin do?
Select an answer first
37application · medium
A Linux server has a directory /var/www/html that is owned by root. The web server runs as the user 'www-data' and needs to write to this directory. Which command should the admin run to give the web server write access while maintaining security?
Select an answer first
38expert · hard
A Linux administrator needs to allow a specific user 'alice' to read a file that is owned by root and has permissions 640 root:root. The administrator does not want to change the file's owner or group. Which approach is the most appropriate?
Select an answer first
39application · medium
A macOS administrator needs to ensure that a specific application can access files in the user's Desktop folder. The application is not currently listed in System Settings > Privacy & Security > Files and Folders. What should the administrator do?
Select an answer first
40foundation · easy
Which command-line tool is commonly used to configure the host-based firewall on a Linux system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.