A security analyst needs to share a network diagram that contains sensitive infrastructure details with a new team member. The analyst wants to ensure the document is protected. Which method is most appropriate?

Post the document on a public wiki page so the team member can access it easily.

Email the document as an attachment to the new team member's personal email address.

Print the document and leave it on a shared printer for the team member to pick up.

Save the document to a shared drive with access restricted to the security team and require authentication.

What is the primary purpose of a CVE identifier in vulnerability management?

To provide step-by-step remediation instructions

To provide a unique, standardized reference for a specific vulnerability

To rank vulnerabilities by their exploitability

To automatically patch the vulnerability

Why is it important to update documentation before a cybersecurity incident occurs?

To prevent all incidents from occurring

To satisfy regulatory requirements only

To ensure that response procedures are accurate and readily available when needed

To replace the need for incident response training

A small company wants to run a vulnerability scan of its internal network. The IT manager is concerned about the scan disrupting business operations. Which approach best balances the need for a thorough scan with the risk of disruption?

Skip the scan and rely on the latest vendor patches because scanning is too risky.

Run a full scan with all plugins enabled on all systems, including production servers, at any time.

Run an authenticated scan during a maintenance window and configure the scanner to avoid destructive checks.

Run an unauthenticated scan during business hours to get a quick baseline of external-facing services.

A company's incident response plan is stored in a shared document repository. After a recent incident, the team realized that some procedures were outdated and that the plan was not followed correctly. The team wants to update the plan and ensure that all members use the latest version. What is the most effective way to manage the update?

Email the updated plan to all team members and ask them to save it locally.

Create a new plan from scratch and delete the old one, to avoid confusion.

Assign a single owner to update the plan, use version control, and conduct a training session to communicate the changes.

Allow all team members to edit the plan simultaneously, because collaboration is important.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 4Objective 2

Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 7)

Part of the Vulnerability Assessment and Risk Management domain, which makes up ~20% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

10concepts

Questions 31–35

31application · medium
A security analyst needs to share a network diagram that contains sensitive infrastructure details with a new team member. The analyst wants to ensure the document is protected. Which method is most appropriate?
Select an answer first
32foundation · easy
What is the primary purpose of a CVE identifier in vulnerability management?
Select an answer first
33foundation · easy
Why is it important to update documentation before a cybersecurity incident occurs?
Select an answer first
34application · medium
A small company wants to run a vulnerability scan of its internal network. The IT manager is concerned about the scan disrupting business operations. Which approach best balances the need for a thorough scan with the risk of disruption?
Select an answer first
35expert · hard
A company's incident response plan is stored in a shared document repository. After a recent incident, the team realized that some procedures were outdated and that the plan was not followed correctly. The team wants to update the plan and ensure that all members use the latest version. What is the most effective way to manage the update?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.