A security analyst is investigating a suspected man-in-the-middle attack on the company's web application. The analyst notices that users are being redirected to a fake login page that looks identical to the real one. The fake page captures credentials. Which combination of techniques is most likely being used?

DNS spoofing and a phishing page

Which characteristic of many IoT devices makes them particularly vulnerable to being compromised?

They often have default credentials that are not changed

They use only wired connections

They have unlimited processing power

What is the primary goal of a Denial of Service (DoS) attack?

To disrupt the availability of a service

To steal sensitive data from the target

To modify the content of a website

To gain administrative access to the target

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 1Objective 2

Explain Common Threats and Vulnerabilities 100-160 Practice Questions (Page 8)

Part of the Essential Security Principles domain, which makes up ~18% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 36–40

36foundation · easy
Which malware type is characterized by secretly monitoring user activity and sending collected data to a remote attacker?
Select an answer first
37expert · hard
A security analyst is investigating a suspected man-in-the-middle attack on the company's web application. The analyst notices that users are being redirected to a fake login page that looks identical to the real one. The fake page captures credentials. Which combination of techniques is most likely being used?
Select an answer first
38expert · hard
A user reports that their computer is sending emails to contacts without their knowledge. The emails contain a link that, when clicked, downloads a file that infects the recipient's computer. Which type of malware is responsible for this behavior?
Select an answer first
39foundation · easy
Which characteristic of many IoT devices makes them particularly vulnerable to being compromised?
Select an answer first
40foundation · easy
What is the primary goal of a Denial of Service (DoS) attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Explain Common Threats and Vulnerabilities 100-160 Practice Questions (Page 8)

Questions 36–40

Which malware type is characterized by secretly monitoring user activity and sending collected data to a remote attacker?

A user reports that their computer is sending emails to contacts without their knowledge. The emails contain a link that, when clicked, downloads a file that infects the recipient's computer. Which type of malware is responsible for this behavior?

Which characteristic of many IoT devices makes them particularly vulnerable to being compromised?

What is the primary goal of a Denial of Service (DoS) attack?

Keep studying — Essential Security Principles