An organization has a security baseline that requires specific Windows security settings, a defined set of approved software, and monthly patching. The IT team is small and needs to verify compliance across 1,000 endpoints without adding significant overhead. Which approach provides the best balance of automation and verification?

Deploy a network access control (NAC) solution that blocks noncompliant devices from the network, but does not remediate them.

Use Microsoft Intune to enforce configuration baselines, manage software inventory, and deploy patches, with compliance reports generated automatically.

Use Group Policy to enforce the baseline settings, but rely on employees to install approved software and patches themselves.

Create a PowerShell script that checks the baseline settings and software inventory, and run it manually on each endpoint once a quarter.

What is the main purpose of a software inventory?

To speed up the installation of new software on endpoints

To replace the need for antivirus software on endpoints

To list and track installed software to verify compliance with licensing and security standards

To provide a backup of all software license keys

A company allows employees to bring their own laptops for work. The security team needs to ensure that company data on these laptops is protected if a device is lost or stolen. Which strategy should be implemented?

Block BYOD laptops from accessing the corporate network.

Require employees to sign an acceptable use policy.

Enforce full-disk encryption on all BYOD laptops that access company data.

Install a remote wipe capability on all BYOD laptops.

What is a common method to control app distribution on BYOD devices?

Using an enterprise app store or MDM to deploy approved apps

Requiring users to manually verify each app's security

Blocking all app installations on the device

Allowing users to install any app from any source

Why is data encryption important on BYOD devices?

It speeds up the device's performance

It prevents the installation of unauthorized apps

It protects sensitive data if the device is lost or stolen

It allows the organization to monitor all user activity

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 3

Verify That Endpoint Systems Meet Security Policies and Standards 100-160 Practice Questions (Page 8)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

Questions 36–40

36expert · hard
An organization has a security baseline that requires specific Windows security settings, a defined set of approved software, and monthly patching. The IT team is small and needs to verify compliance across 1,000 endpoints without adding significant overhead. Which approach provides the best balance of automation and verification?
Select an answer first
37foundation · easy
What is the main purpose of a software inventory?
Select an answer first
38application · medium
A company allows employees to bring their own laptops for work. The security team needs to ensure that company data on these laptops is protected if a device is lost or stolen. Which strategy should be implemented?
Select an answer first
39foundation · easy
What is a common method to control app distribution on BYOD devices?
Select an answer first
40foundation · easy
Why is data encryption important on BYOD devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.