A company's website becomes slow and then unavailable. The network team sees a massive surge of incoming traffic from thousands of different IP addresses, many of which are known IoT devices. The traffic is not from a single source. Which type of attack is this, and what is the most effective immediate mitigation?

DoS; enable rate limiting on the web server

DDoS; use a cloud-based DDoS protection service

DDoS; block the source IP addresses in the firewall

A company's file server is encrypted by ransomware. The IT team has verified that their last full backup was taken two weeks ago, and the backup is stored offline. Management is considering paying the ransom. What is the most appropriate response?

Restore from the backup but also pay the ransom to ensure no data loss

Restore from the offline backup and do not pay the ransom

Try to decrypt the files using free tools available online

Pay the ransom to get the decryption key quickly

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 1Objective 2

Explain Common Threats and Vulnerabilities 100-160 Practice Questions (Page 3)

Part of the Essential Security Principles domain, which makes up ~18% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 11–15

11expert · hard
A company deploys smart thermostats and IP cameras on the same network as their business systems. The devices use default credentials and cannot be patched. An attacker compromises these devices and uses them to flood the company's internet connection with traffic, making the business systems unreachable. Which two security concepts are most directly demonstrated in this scenario?
Select an answer first
12foundation · easy
Which phase of the APT lifecycle involves the attacker maintaining access to the compromised network for future use?
Select an answer first
13application · medium
A company's website becomes slow and then unavailable. The network team sees a massive surge of incoming traffic from thousands of different IP addresses, many of which are known IoT devices. The traffic is not from a single source. Which type of attack is this, and what is the most effective immediate mitigation?
Select an answer first
14expert · hard
A company's file server is encrypted by ransomware. The IT team has verified that their last full backup was taken two weeks ago, and the backup is stored offline. Management is considering paying the ransom. What is the most appropriate response?
Select an answer first
15foundation · easy
An attacker sends a fraudulent email that appears to come from the CEO, asking the finance department to urgently wire funds to a specific account. This is an example of which social engineering attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Explain Common Threats and Vulnerabilities 100-160 Practice Questions (Page 3)

Questions 11–15

Which phase of the APT lifecycle involves the attacker maintaining access to the compromised network for future use?

A company's file server is encrypted by ransomware. The IT team has verified that their last full backup was taken two weeks ago, and the backup is stored offline. Management is considering paying the ransom. What is the most appropriate response?

An attacker sends a fraudulent email that appears to come from the CEO, asking the finance department to urgently wire funds to a specific account. This is an example of which social engineering attack?

Keep studying — Essential Security Principles