A network engineer is troubleshooting a network outage. The engineer suspects a smurf attack because the network is receiving a large amount of ICMP echo replies. The network has a /24 subnet with many hosts. Which mitigation would be most effective in preventing the network from being used as an amplifier in a smurf attack?

Configure the router to not forward directed broadcast traffic

Enable TCP SYN cookies on all hosts

Increase the number of hosts on the subnet to absorb the traffic

Block all ICMP traffic on the network

Which characteristic of UDP makes it especially vulnerable to spoofing and amplification attacks?

It encrypts all payloads by default

It has no connection state and does not verify the source address

It requires both endpoints to authenticate before sending data

It uses a three-way handshake to establish connections

A security analyst is reviewing firewall logs and sees a high volume of ICMP echo requests from a single external IP to many internal hosts. The internal hosts are responding with echo replies. The analyst is concerned about network reconnaissance. Which additional action would best help prevent this type of reconnaissance while still allowing necessary network diagnostics?

Use a stateful firewall to allow only established ICMP connections

Disable ICMP on all internal hosts

Block all ICMP traffic at the perimeter firewall

Rate-limit ICMP echo requests and block unsolicited echo replies

A user on the corporate network reports that when they visit a website, the page loads but displays incorrect content and their login credentials are later used to access their account. A network capture shows the user's browser sent an HTTP request and received a response from an unexpected IP address. Which two protocol vulnerabilities are most likely being exploited?

HTTP does not validate server certificates, and DHCP starvation can assign the user a malicious IP address.

HTTP transmits data in plaintext, and ARP spoofing can redirect traffic to an attacker's machine.

HTTP uses connectionless UDP, and ICMP redirect messages can alter the user's routing table.

HTTP uses a three-way handshake that can be hijacked, and DNS cache poisoning can replace the website's IP address with the attacker's.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 1

Describe TCP/IP Protocol Vulnerabilities 100-160 Practice Questions (Page 3)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

7concepts

Questions 11–15

11expert · hard
A network engineer is troubleshooting a network outage. The engineer suspects a smurf attack because the network is receiving a large amount of ICMP echo replies. The network has a /24 subnet with many hosts. Which mitigation would be most effective in preventing the network from being used as an amplifier in a smurf attack?
Select an answer first
12foundation · easy
Which characteristic of UDP makes it especially vulnerable to spoofing and amplification attacks?
Select an answer first
13application · medium
A security analyst is reviewing firewall logs and sees a high volume of ICMP echo requests from a single external IP to many internal hosts. The internal hosts are responding with echo replies. The analyst is concerned about network reconnaissance. Which additional action would best help prevent this type of reconnaissance while still allowing necessary network diagnostics?
Select an answer first
14application · medium
A user on the corporate network reports that when they visit a website, the page loads but displays incorrect content and their login credentials are later used to access their account. A network capture shows the user's browser sent an HTTP request and received a response from an unexpected IP address. Which two protocol vulnerabilities are most likely being exploited?
Select an answer first
15foundation · easy
What is a common mitigation technique for ARP spoofing attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Describe TCP/IP Protocol Vulnerabilities 100-160 Practice Questions (Page 3)

Questions 11–15

Which characteristic of UDP makes it especially vulnerable to spoofing and amplification attacks?

What is a common mitigation technique for ARP spoofing attacks?

Keep studying — Basic Network Security Concepts