A security auditor is evaluating the encryption algorithms used in a legacy system. The system uses 3DES for data at rest and RC4 for network traffic. What should the auditor recommend?

Replace 3DES with AES and RC4 with TLS using AES

Keep both algorithms because they are still widely used

Keep 3DES but replace RC4 with AES

Keep RC4 but replace 3DES with AES

A company plans to issue digital certificates to employees for email signing. They want to minimize the risk of a compromised CA key. Which PKI practice directly addresses this concern?

Using an offline root CA and online issuing CA

Using symmetric encryption for certificate issuance

Storing the CA private key on a web server

Issuing certificates with long validity periods

A security architect is designing a secure messaging system for a large organization. The system must support both confidentiality and non-repudiation for messages sent between employees. The architect decides to use asymmetric encryption for the message content. What is the primary drawback of this approach?

Asymmetric encryption is slower than symmetric encryption for large messages

Asymmetric encryption is vulnerable to brute-force attacks

Asymmetric encryption requires a shared secret key

Asymmetric encryption cannot provide non-repudiation

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 1Objective 4

Explain Encryption Methods and Applications 100-160 Practice Questions (Page 2)

Part of the Essential Security Principles domain, which makes up ~18% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

7concepts

Questions 6–10

6application · medium
A security auditor is evaluating the encryption algorithms used in a legacy system. The system uses 3DES for data at rest and RC4 for network traffic. What should the auditor recommend?
Select an answer first
7application · medium
A company plans to issue digital certificates to employees for email signing. They want to minimize the risk of a compromised CA key. Which PKI practice directly addresses this concern?
Select an answer first
8expert · hard
A security architect is designing a secure messaging system for a large organization. The system must support both confidentiality and non-repudiation for messages sent between employees. The architect decides to use asymmetric encryption for the message content. What is the primary drawback of this approach?
Select an answer first
9foundation · easy
Which encryption method is most appropriate for protecting data in transit over the internet?
Select an answer first
10application · medium
A network administrator needs to secure communications between two branch offices over the internet. The solution must encrypt all IP traffic between the sites, including non-TCP protocols. Which protocol should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Explain Encryption Methods and Applications 100-160 Practice Questions (Page 2)

Questions 6–10

A security auditor is evaluating the encryption algorithms used in a legacy system. The system uses 3DES for data at rest and RC4 for network traffic. What should the auditor recommend?

A company plans to issue digital certificates to employees for email signing. They want to minimize the risk of a compromised CA key. Which PKI practice directly addresses this concern?

Which encryption method is most appropriate for protecting data in transit over the internet?

A network administrator needs to secure communications between two branch offices over the internet. The solution must encrypt all IP traffic between the sites, including non-TCP protocols. Which protocol should be used?

Keep studying — Essential Security Principles