Cisco 100-160 Exam Dumps

The CCST Cybersecurity Study Guide notes that HIPAA (Health Insurance Portability and Accountability Act) requires that ePHI be protected both in storage and when devices are decommissioned or repurposed. This includes implementing data removal policies for mobile devices.

'HIPAA requires procedures for the removal of electronic protected health information (ePHI) from devices before disposal, reuse, or reassignment.'

(CCST Cybersecurity, Essential Security Principles, Regulatory Compliance section, Cisco Networking Academy)

The CCST Cybersecurity Study Guide states that Access Control Lists (ACLs) can be used to filter traffic based on IP addresses and block packets that appear to originate from the internal network but arrive from external interfaces (IP spoofing).

'ACLs can prevent spoofing by dropping traffic from external sources that claim to have an internal source address. Configuring ACLs on the perimeter firewall or router is a common countermeasure for IP spoofing.'

(CCST Cybersecurity, Basic Network Security Concepts, ACLs and Traffic Filtering section, Cisco Networking Academy)

A (NAT rule) changes IP addresses but does not inherently prevent spoofing.

B (ACL) is correct because it can enforce anti-spoofing filters.

C (host file) only affects name resolution locally.

D (DNS record) is for domain mapping, not spoofing prevention.

The CCST Cybersecurity Study Guide specifies that both Wireshark and tcpdump are packet capture tools that can record network traffic to a file for later analysis.

'Wireshark provides a graphical interface for packet capture and analysis. Tcpdump is a command-line tool that captures packets for detailed offline review.'

(CCST Cybersecurity, Incident Handling, Network Traffic Analysis section, Cisco Networking Academy)

A is correct: Wireshark is widely used for packet capture and analysis.

B is correct: tcpdump is a CLI-based packet capture tool.

C (Nmap) is for network scanning, not packet capture.

D (netstat) displays network connections and ports but does not capture packets.

The CCST Cybersecurity Study Guide distinguishes between Disaster Recovery Plans (DRP) and Business Continuity Plans (BCP):

A BCP focuses on keeping the business running during a disruption.

A DRP focuses on restoring IT services and data after a disaster has occurred.

'A disaster recovery plan outlines procedures for restoring data and critical IT infrastructure to operational status following a disruptive incident. The goal is to resume normal IT operations as quickly as possible.'

(CCST Cybersecurity, Essential Security Principles, Business Continuity and Disaster Recovery section, Cisco Networking Academy)

A is a general effect of both BCP and DRP.

B and D describe business continuity, not disaster recovery.

C is correct: DRP's main purpose is restoring IT systems and data quickly after disruption

According to the CCST Cybersecurity course, anti-malware solutions with real-time protection scan files as they are downloaded or opened, blocking malicious code before it runs.

'Real-time protection automatically inspects files, applications, and scripts as they are accessed or downloaded, preventing execution of malicious code.'

(CCST Cybersecurity, Endpoint Security Concepts, Malware Protection section, Cisco Networking Academy)