A security analyst is conducting a passive reconnaissance assessment of a target organization. The analyst has gathered OSINT data, including employee names and email addresses. The analyst now wants to identify potential usernames for a future password-spraying test. Which technique is most appropriate?

Use common username patterns derived from the OSINT data, such as first initial plus last name

Perform a port scan on the target's VPN gateway

Send test login attempts to the target's web portal

Query the target's DNS server for user records

Which of the following is an example of using automation in vulnerability testing?

Manually checking each system for missing patches

Scheduling regular vulnerability scans to run automatically

Conducting interviews with system administrators

Reviewing security logs by hand

A security analyst is researching a target organization before an authorized assessment. The analyst wants to gather information without sending any packets to the target's network. Which method is most appropriate?

Use a port scanner to enumerate open ports.

Run a vulnerability scanner against the target's IP range.

Review public financial reports and press releases for technology details.

Perform a ping sweep to identify live hosts.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 4Objective 1

Explain Vulnerability Management 100-160 Practice Questions (Page 10)

Part of the Vulnerability Assessment and Risk Management domain, which makes up ~20% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 46–49

46expert · hard
A security analyst is conducting a passive reconnaissance assessment of a target organization. The analyst has gathered OSINT data, including employee names and email addresses. The analyst now wants to identify potential usernames for a future password-spraying test. Which technique is most appropriate?
Select an answer first
47application · easy
A security analyst is performing a port scan of a server and receives the following results: port 21 is open, port 22 is open, and port 25 is open. Which set of services is most likely running on this server?
Select an answer first
48foundation · easy
Which of the following is an example of using automation in vulnerability testing?
Select an answer first
49application · medium
A security analyst is researching a target organization before an authorized assessment. The analyst wants to gather information without sending any packets to the target's network. Which method is most appropriate?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Explain Vulnerability Management 100-160 Practice Questions (Page 10)

Questions 46–49

A security analyst is performing a port scan of a server and receives the following results: port 21 is open, port 22 is open, and port 25 is open. Which set of services is most likely running on this server?

Which of the following is an example of using automation in vulnerability testing?

A security analyst is researching a target organization before an authorized assessment. The analyst wants to gather information without sending any packets to the target's network. Which method is most appropriate?

Keep studying — Vulnerability Assessment and Risk Management