A system has a known vulnerability for which no vendor patch is yet available. Which mitigation strategy would best reduce the risk while waiting for a patch?

Implement a compensating control

Wait for the patch to be released

Increase the system's logging level

A penetration tester is performing active reconnaissance on a target network. The tester wants to identify live hosts and open ports without being detected by the target's IDS. Which technique is most likely to avoid detection?

Use a TCP connect scan from a single source IP.

Perform a fast SYN scan of all ports on all hosts.

Send a large number of packets to overwhelm the IDS.

Use a slow port scan with random source ports and delays.

What is a key benefit of using automated vulnerability scanning tools?

They guarantee that all vulnerabilities are found

They eliminate the need for human analysis

They can scan many systems consistently and quickly

They can fix vulnerabilities automatically

A network administrator is troubleshooting a connectivity issue and wants to verify which services are listening on a specific server. The administrator runs a port scan and sees that port 3306 is open. Which service is most likely running on that port?

Simple Mail Transfer Protocol (SMTP) server

Hypertext Transfer Protocol (HTTP) server

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 4Objective 1

Explain Vulnerability Management 100-160 Practice Questions (Page 7)

Part of the Vulnerability Assessment and Risk Management domain, which makes up ~20% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 31–35

31foundation · easy
A system has a known vulnerability for which no vendor patch is yet available. Which mitigation strategy would best reduce the risk while waiting for a patch?
Select an answer first
32expert · hard
A penetration tester is performing active reconnaissance on a target network. The tester wants to identify live hosts and open ports without being detected by the target's IDS. Which technique is most likely to avoid detection?
Select an answer first
33foundation · easy
A port scan reveals that TCP port 22 is open on a server. Which service is most likely running on this port?
Select an answer first
34foundation · easy
What is a key benefit of using automated vulnerability scanning tools?
Select an answer first
35application · easy
A network administrator is troubleshooting a connectivity issue and wants to verify which services are listening on a specific server. The administrator runs a port scan and sees that port 3306 is open. Which service is most likely running on that port?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.