A security team uses an automated vulnerability scanner that generates thousands of findings each month. The team is overwhelmed by the volume and wants to focus on the most critical issues. Which approach best improves the efficiency of the vulnerability management process?

Prioritize findings based on the Common Vulnerability Scoring System (CVSS) score and asset criticality

Ignore all findings with a CVSS score below 9.0

Increase the frequency of scans to generate more data

Automatically close all duplicate findings without review

A security analyst is performing a port scan of a newly discovered internal server. The scan shows TCP port 3389 open and TCP port 22 closed. The analyst needs to determine which service is exposed and what risk it poses. Which action best achieves this?

Check the Windows Event Logs on the server for RDP login attempts.

Run a service enumeration tool against port 3389 to identify the application and version.

Scan all 65535 ports with a SYN scan to confirm no other ports are open.

Immediately block port 3389 on the firewall without further investigation.

After a vulnerability scan, a security team identifies several critical vulnerabilities in a web application. The team applies patches and makes configuration changes. What is the next step in the vulnerability management lifecycle?

Update the asset inventory to remove the application

Immediately close the vulnerability tickets without further action

Schedule the next scan for the following year

Verify that the vulnerabilities have been remediated by re-scanning the application

A security analyst is investigating a potential vulnerability on a server. The analyst has identified that port 443 is open and is running a web server. The analyst needs to determine if the web server version is vulnerable to a known exploit. Which technique is most appropriate?

Use a vulnerability scanner that includes a plugin for the specific web server version.

Use a packet sniffer to capture traffic on the network.

Perform a port scan to confirm the port is open.

Check the server's firewall logs for connection attempts.

What is the primary purpose of service enumeration during active reconnaissance?

To determine the organization's security policies

To map the physical location of servers

To identify the specific software and versions running on open ports

To identify the target's employees and their roles

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 4Objective 1

Explain Vulnerability Management 100-160 Practice Questions (Page 6)

Part of the Vulnerability Assessment and Risk Management domain, which makes up ~20% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 26–30

26expert · hard
A security team uses an automated vulnerability scanner that generates thousands of findings each month. The team is overwhelmed by the volume and wants to focus on the most critical issues. Which approach best improves the efficiency of the vulnerability management process?
Select an answer first
27application · medium
A security analyst is performing a port scan of a newly discovered internal server. The scan shows TCP port 3389 open and TCP port 22 closed. The analyst needs to determine which service is exposed and what risk it poses. Which action best achieves this?
Select an answer first
28application · medium
After a vulnerability scan, a security team identifies several critical vulnerabilities in a web application. The team applies patches and makes configuration changes. What is the next step in the vulnerability management lifecycle?
Select an answer first
29expert · hard
A security analyst is investigating a potential vulnerability on a server. The analyst has identified that port 443 is open and is running a web server. The analyst needs to determine if the web server version is vulnerable to a known exploit. Which technique is most appropriate?
Select an answer first
30foundation · easy
What is the primary purpose of service enumeration during active reconnaissance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.