A company allows employees to use personal tablets for work. The security team wants to control which apps can be installed on these devices to prevent malicious or unapproved software. Which approach should they use?

Install antivirus software on each tablet.

Ask employees to only download apps from the official app store.

Use an MDM solution to create an approved app list and restrict installation to that list.

Require employees to submit a screenshot of their home screen each week.

What is the purpose of configuration management in endpoint security?

To replace the need for antivirus software

To manage user passwords on endpoints

To verify that endpoint configurations align with security standards and policies

To increase the processing speed of endpoints

A hospital's backup policy requires daily backups of all endpoints that store patient data, with a retention period of 30 days. The backup administrator discovers that some endpoints have not been backed up for 3 days due to a storage failure. What should the administrator do to restore compliance?

Extend the retention period to 60 days to compensate for the missed backups.

Immediately rerun the backups for the affected endpoints and verify that the backups complete successfully.

Disconnect the affected endpoints from the network until backups are restored.

Document the incident and wait for the next scheduled backup.

A retail company processes credit card payments and must comply with PCI DSS. The security team is reviewing endpoint security controls. Which combination of controls is most directly required by PCI DSS for endpoints that handle cardholder data?

Conduct annual security awareness training for all employees who handle cardholder data.

Perform daily backups of all endpoints and store them offsite without encryption.

Maintain an up-to-date software inventory, apply security patches promptly, and use file-integrity monitoring on critical system files.

Install a physical lock on every server rack and require badge access to the data center.

What should a backup policy include to ensure data can be restored effectively?

A list of all employees who have access to the backup server

A requirement to store backups on the same drive as the original data

A rule that backups are only made after a security incident

A schedule for backups and a procedure for testing restores

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 3

Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 4)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

Questions 16–20

16application · medium
A company allows employees to use personal tablets for work. The security team wants to control which apps can be installed on these devices to prevent malicious or unapproved software. Which approach should they use?
Select an answer first
17foundation · easy
What is the purpose of configuration management in endpoint security?
Select an answer first
18expert · medium
A hospital's backup policy requires daily backups of all endpoints that store patient data, with a retention period of 30 days. The backup administrator discovers that some endpoints have not been backed up for 3 days due to a storage failure. What should the administrator do to restore compliance?
Select an answer first
19application · medium
A retail company processes credit card payments and must comply with PCI DSS. The security team is reviewing endpoint security controls. Which combination of controls is most directly required by PCI DSS for endpoints that handle cardholder data?
Select an answer first
20foundation · easy
What should a backup policy include to ensure data can be restored effectively?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.