What is the primary purpose of deploying software patches to endpoints?

To change the licensing model of the software

To remove unused software from endpoints

To fix security vulnerabilities and improve functionality

To increase the number of installed applications

A small business uses a mix of Windows and macOS endpoints. The security team needs to deploy a critical security patch to all endpoints within 48 hours. Which deployment method best ensures compliance with the patch policy?

Send an email to all employees with a link to download and install the patch manually.

Deploy the patch only to Windows endpoints because macOS is less vulnerable.

Use a centralized patch management tool that supports both Windows and macOS and schedule the deployment in waves.

Wait for the next scheduled maintenance window, which occurs in two weeks.

A company's security policy requires that all endpoint software be licensed and patched. During an audit, the security team discovers several workstations running an unapproved file-sharing application. What should the team do first to verify compliance?

Disconnect the workstations from the network to prevent data exfiltration.

Update the antivirus signatures on the affected workstations.

Immediately uninstall the application from all affected workstations.

Compare the installed software list against the approved software inventory and licensing records.

An organization's security baseline requires that all endpoints have a specific registry setting enabled. During a compliance scan, several endpoints are found to be non-compliant. What should the security team do to verify that the endpoints meet the policy?

Ask administrators to confirm that they applied the setting during imaging.

Manually check the registry setting on a sample of endpoints.

Use a configuration management tool to check the registry setting on all endpoints and generate a compliance report.

Review the hardware inventory to ensure all endpoints are accounted for.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 3

Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 6)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

Questions 26–30

26foundation · easy
Which regulatory standard is specifically designed to protect cardholder data in payment card transactions?
Select an answer first
27foundation · easy
What is the primary purpose of deploying software patches to endpoints?
Select an answer first
28application · medium
A small business uses a mix of Windows and macOS endpoints. The security team needs to deploy a critical security patch to all endpoints within 48 hours. Which deployment method best ensures compliance with the patch policy?
Select an answer first
29application · medium
A company's security policy requires that all endpoint software be licensed and patched. During an audit, the security team discovers several workstations running an unapproved file-sharing application. What should the team do first to verify compliance?
Select an answer first
30application · medium
An organization's security baseline requires that all endpoints have a specific registry setting enabled. During a compliance scan, several endpoints are found to be non-compliant. What should the security team do to verify that the endpoints meet the policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.