A user receives a certificate from a website. The certificate's digital signature is verified using the CA's public key. What does this verification prove?

The user's connection is anonymous

The certificate was issued by the CA and has not been altered

The website's private key is secure

A security analyst needs to verify that a downloaded firmware file has not been altered during transfer. The vendor provides a SHA-256 hash of the original file. What should the analyst do?

Encrypt the downloaded file with the vendor's private key and compare the ciphertext to the hash

Compute the SHA-256 hash of the downloaded file and compare it to the vendor's hash

Decrypt the downloaded file with the vendor's public key and compare the result to the original

Use a digital signature to verify the file's confidentiality

A company is deploying a new application that processes credit card payments. The application must protect cardholder data while it is being processed in memory and while it is transmitted to the payment processor. Which combination of controls is appropriate?

Use TLS for transmission and avoid storing card data; use memory protection techniques for data in use

Use full-disk encryption on the application server and TLS for transmission

Use IPsec for transmission and store card data in a database with column-level encryption

Use a hash of the card data for transmission and store the hash only

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 1Objective 4

Explain Encryption Methods and Applications 100-160 Practice Questions (Page 6)

Part of the Essential Security Principles domain, which makes up ~18% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

7concepts

Questions 26–30

26application · medium
A user receives a certificate from a website. The certificate's digital signature is verified using the CA's public key. What does this verification prove?
Select an answer first
27foundation · easy
Which of the following encryption algorithms is generally considered weak and should be avoided in modern systems?
Select an answer first
28application · medium
A security analyst needs to verify that a downloaded firmware file has not been altered during transfer. The vendor provides a SHA-256 hash of the original file. What should the analyst do?
Select an answer first
29foundation · easy
Which protocol is commonly used to securely access a remote server's command-line interface over an unsecured network?
Select an answer first
30application · medium
A company is deploying a new application that processes credit card payments. The application must protect cardholder data while it is being processed in memory and while it is transmitted to the payment processor. Which combination of controls is appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Explain Encryption Methods and Applications 100-160 Practice Questions (Page 6)

Questions 26–30

A user receives a certificate from a website. The certificate's digital signature is verified using the CA's public key. What does this verification prove?

Which of the following encryption algorithms is generally considered weak and should be avoided in modern systems?

A security analyst needs to verify that a downloaded firmware file has not been altered during transfer. The vendor provides a SHA-256 hash of the original file. What should the analyst do?

Which protocol is commonly used to securely access a remote server's command-line interface over an unsecured network?

A company is deploying a new application that processes credit card payments. The application must protect cardholder data while it is being processed in memory and while it is transmitted to the payment processor. Which combination of controls is appropriate?

Keep studying — Essential Security Principles