A security analyst is performing a port scan of a server and receives the following results: port 22 is open, port 80 is open, and port 443 is open. The analyst wants to determine if the web server is vulnerable to a specific exploit. Which technique is most appropriate?

Use a vulnerability scanner to identify the web server software and version

Send a crafted exploit to the web server to test for vulnerability

Use a packet sniffer to capture traffic to the web server

Perform a full connect scan on all ports to confirm the results

What is the primary purpose of a port scan in vulnerability assessment?

To identify the physical location of the server

To discover open ports and the services running on them

To test the strength of passwords

To determine the operating system version

Which activity is an example of active reconnaissance?

Searching public job postings for technology used by the target

Monitoring network traffic without sending packets

Sending packets to a target to discover open ports

Reviewing the target's website for employee names

A security analyst is conducting an authorized penetration test. The goal is to identify which services are running on a target server. Which technique is most effective for this purpose?

Perform a port scan followed by service enumeration on open ports.

Review the server's firewall logs for incoming connections.

Use passive OSINT to search for the server's IP address on public databases.

Send a single ping to the server to check if it is alive.

A critical vulnerability is found in a legacy application that cannot be patched because the vendor is out of business. The application is used by the finance department and is accessible from the internal network. The company cannot afford to replace it this year. Which combination of mitigations is most effective?

Disable the application and have finance use spreadsheets instead.

Grant all employees access to the application to increase productivity.

Run the application on a server with no antivirus to improve performance.

Segment the application into a separate VLAN and restrict access to only finance users via firewall rules.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 4Objective 1

Explain Vulnerability Management 100-160 Practice Questions (Page 4)

Part of the Vulnerability Assessment and Risk Management domain, which makes up ~20% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 16–20

16expert · hard
A security analyst is performing a port scan of a server and receives the following results: port 22 is open, port 80 is open, and port 443 is open. The analyst wants to determine if the web server is vulnerable to a specific exploit. Which technique is most appropriate?
Select an answer first
17foundation · easy
What is the primary purpose of a port scan in vulnerability assessment?
Select an answer first
18foundation · easy
Which activity is an example of active reconnaissance?
Select an answer first
19application · medium
A security analyst is conducting an authorized penetration test. The goal is to identify which services are running on a target server. Which technique is most effective for this purpose?
Select an answer first
20expert · hard
A critical vulnerability is found in a legacy application that cannot be patched because the vendor is out of business. The application is used by the finance department and is accessible from the internal network. The company cannot afford to replace it this year. Which combination of mitigations is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.