A network administrator is configuring a firewall to allow remote employees to use a VPN to access the internal network. The VPN uses IPsec with UDP port 500 and ESP protocol. The firewall currently blocks all inbound traffic. Which firewall rule should be added to allow the VPN traffic?

Allow TCP port 443 from any source to the VPN gateway.

Allow all UDP traffic to the VPN gateway.

Allow UDP port 500 and ESP protocol from any source to the VPN gateway.

Allow all IP traffic from any source to the VPN gateway.

A company has remote employees who connect from home and need to access internal applications that are only reachable on the corporate network. The company wants to ensure that all traffic between the remote employee's device and the corporate network is encrypted, and they want to avoid installing any additional software on the employee's personal devices. Which solution best meets these requirements?

Deploy an SSL/TLS VPN that is accessed through a web browser.

Set up a site-to-site VPN between the corporate office and each employee's home network.

Use a remote desktop gateway that exposes the internal applications directly to the internet.

Configure an IPsec VPN tunnel on each employee's home router.

A company is deploying a new remote-access solution for 200 employees. The security team requires that all remote traffic be encrypted and that the solution support multi-factor authentication (MFA). The company has a limited budget and wants to minimize the number of new hardware devices. Which solution best meets these requirements?

Deploy a software-based SSL/TLS VPN gateway on an existing server and integrate it with the company's existing MFA system.

Configure the existing firewall to allow direct remote access to internal servers without a VPN.

Purchase a dedicated hardware IPsec VPN concentrator for each remote user.

Use a site-to-site VPN between each employee's home and the office.

A network administrator is configuring a router with an ACL to block all traffic from the internal network to the internet, except for DNS (UDP 53) and HTTPS (TCP 443). The ACL is applied outbound on the internal interface. Which ACL configuration should be used?

Permit udp any any eq 53; permit tcp any any eq 443; deny ip any any

Permit tcp any any eq 53; permit udp any any eq 443; deny ip any any

Permit ip any any; deny udp any any eq 53; deny tcp any any eq 443

Permit udp any eq 53 any; permit tcp any eq 443 any; deny ip any any

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 2Objective 5

Implement Secure Access Technologies 100-160 Practice Questions (Page 1)

Part of the Basic Network Security Concepts domain, which makes up ~19% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

4concepts

Questions 1–5

1expert · hard
A network administrator is configuring a firewall to allow remote employees to use a VPN to access the internal network. The VPN uses IPsec with UDP port 500 and ESP protocol. The firewall currently blocks all inbound traffic. Which firewall rule should be added to allow the VPN traffic?
Select an answer first
2application · medium
A network administrator is configuring a router to block all Telnet traffic (port 23) from the internal network to the internet. The router has an ACL applied to the outbound direction of the internal interface. Which ACL entry should be used?
Select an answer first
3application · medium
A company has remote employees who connect from home and need to access internal applications that are only reachable on the corporate network. The company wants to ensure that all traffic between the remote employee's device and the corporate network is encrypted, and they want to avoid installing any additional software on the employee's personal devices. Which solution best meets these requirements?
Select an answer first
4expert · hard
A company is deploying a new remote-access solution for 200 employees. The security team requires that all remote traffic be encrypted and that the solution support multi-factor authentication (MFA). The company has a limited budget and wants to minimize the number of new hardware devices. Which solution best meets these requirements?
Select an answer first
5expert · hard
A network administrator is configuring a router with an ACL to block all traffic from the internal network to the internet, except for DNS (UDP 53) and HTTPS (TCP 443). The ACL is applied outbound on the internal interface. Which ACL configuration should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Implement Secure Access Technologies 100-160 Practice Questions (Page 1)

Questions 1–5

A network administrator is configuring a firewall to allow remote employees to use a VPN to access the internal network. The VPN uses IPsec with UDP port 500 and ESP protocol. The firewall currently blocks all inbound traffic. Which firewall rule should be added to allow the VPN traffic?

A network administrator is configuring a router to block all Telnet traffic (port 23) from the internal network to the internet. The router has an ACL applied to the outbound direction of the internal interface. Which ACL entry should be used?

A network administrator is configuring a router with an ACL to block all traffic from the internal network to the internet, except for DNS (UDP 53) and HTTPS (TCP 443). The ACL is applied outbound on the internal interface. Which ACL configuration should be used?

Keep studying — Basic Network Security Concepts