A security architect is designing a secure web application that will handle sensitive user data. The architect must protect against man-in-the-middle attacks, session hijacking, and DNS-based attacks. The application will be accessed over the internet. Which set of controls is most comprehensive?

Use HTTP with a VPN for all users

Use HTTPS but allow users to bypass certificate warnings

Use HTTPS with HSTS, secure cookies, and DNSSEC

Use a custom encryption protocol on top of TCP

A network administrator notices that several workstations are intermittently losing connectivity to the internet, and the default gateway's MAC address in the ARP cache of these workstations changes frequently. The administrator also sees an unknown device on the network. Which two protocol vulnerabilities are being exploited?

ARP does not authenticate replies, and DHCP can be used by a rogue server to assign a malicious default gateway.

ARP replies are encrypted, and DHCP leases can be renewed indefinitely.

ARP requests are broadcast and can be sniffed, and DHCP offers are always sent to the broadcast address.

ARP uses sequence numbers that can be predicted, and DHCP starvation can exhaust the address pool.

A user reports that when they type a legitimate banking website's URL, they are redirected to a fake site that looks identical. The user's browser shows a valid-looking URL but the page content is different. A network analysis shows that the DNS response received by the user contains an incorrect IP address for the banking domain. Which two protocol vulnerabilities are being exploited?

DNS cache poisoning requires physical access, and DHCP can be used to assign a malicious DNS server.

DNS uses TCP port 53 which can be hijacked, and ARP spoofing can redirect the user to a fake server.

DNS responses are not authenticated by default, and HTTP does not encrypt the URL or page content.

DNS queries are encrypted, and ICMP redirects can be used to alter the user's routing table.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 1

Describe TCP/IP Protocol Vulnerabilities 100-160 Practice Questions (Page 1)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

7concepts

Questions 1–5

1expert · hard
A security architect is designing a secure web application that will handle sensitive user data. The architect must protect against man-in-the-middle attacks, session hijacking, and DNS-based attacks. The application will be accessed over the internet. Which set of controls is most comprehensive?
Select an answer first
2application · medium
A network administrator notices that several workstations are intermittently losing connectivity to the internet, and the default gateway's MAC address in the ARP cache of these workstations changes frequently. The administrator also sees an unknown device on the network. Which two protocol vulnerabilities are being exploited?
Select an answer first
3foundation · easy
Which DNS attack uses spoofed source addresses to send queries to DNS servers, causing them to send large responses to a victim?
Select an answer first
4application · medium
A user reports that when they type a legitimate banking website's URL, they are redirected to a fake site that looks identical. The user's browser shows a valid-looking URL but the page content is different. A network analysis shows that the DNS response received by the user contains an incorrect IP address for the banking domain. Which two protocol vulnerabilities are being exploited?
Select an answer first
5foundation · easy
Which type of attack commonly exploits UDP's lack of connection state to overwhelm a target with a high volume of traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Describe TCP/IP Protocol Vulnerabilities 100-160 Practice Questions (Page 1)

Questions 1–5

A security architect is designing a secure web application that will handle sensitive user data. The architect must protect against man-in-the-middle attacks, session hijacking, and DNS-based attacks. The application will be accessed over the internet. Which set of controls is most comprehensive?

Which DNS attack uses spoofed source addresses to send queries to DNS servers, causing them to send large responses to a victim?

Which type of attack commonly exploits UDP's lack of connection state to overwhelm a target with a high volume of traffic?

Keep studying — Basic Network Security Concepts