Cisco 100-160 Exam Dumps

The CCST Cybersecurity material states that a Virtual Private Network (VPN) provides secure communication over an untrusted network, typically by ensuring:

Authentication verifying the identity of the user/device

Confidentiality encrypting the data so it cannot be read by unauthorized parties

Integrity ensuring that transmitted data has not been altered in transit

'VPNs secure remote access by authenticating users, encrypting data for confidentiality, and ensuring integrity through cryptographic checks.'

(CCST Cybersecurity, Basic Network Security Concepts, VPNs section, Cisco Networking Academy)

A is incorrect: WAN management is a network administration function, not a VPN feature.

B is incorrect: Authorization is related but not a primary VPN security function.

C is correct: Integrity is preserved through cryptographic hashing.

D is correct: Authentication verifies user identity.

E is correct: Confidentiality is provided via encryption.

F is incorrect: Password management is separate from VPN functions.

The CCST Cybersecurity Study Guide distinguishes between Disaster Recovery Plans (DRP) and Business Continuity Plans (BCP):

A BCP focuses on keeping the business running during a disruption.

A DRP focuses on restoring IT services and data after a disaster has occurred.

'A disaster recovery plan outlines procedures for restoring data and critical IT infrastructure to operational status following a disruptive incident. The goal is to resume normal IT operations as quickly as possible.'

(CCST Cybersecurity, Essential Security Principles, Business Continuity and Disaster Recovery section, Cisco Networking Academy)

A is a general effect of both BCP and DRP.

B and D describe business continuity, not disaster recovery.

C is correct: DRP's main purpose is restoring IT systems and data quickly after disruption

The CCST Cybersecurity Study Guide explains that reconnaissance is the process of collecting information about a target before attempting exploitation.

'Passive reconnaissance is conducted without directly engaging with the target systems. Examples include reviewing public websites, examining HTML source code, querying public DNS records, and using social media to gather information. Since no packets are sent directly to the target system, it reduces the risk of detection.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Reconnaissance Techniques section, Cisco Networking Academy)

Passive (A) is correct because all actions described --- viewing public pages, searching online, and checking social media --- involve no direct interaction that could alert the target.

Active (B) would involve direct probing, like port scans or vulnerability scans.

Offline (C) is not an official reconnaissance classification in this context.

Invasive (D) is a general term and not used as a standard reconnaissance category in CCST material.

The CCST Cybersecurity Study Guide explains that disabling SSID broadcast hides the network from casual scanning, adding a layer of obscurity. While not a complete security measure, when combined with WPA2/WPA3 encryption and strong passwords, it can help protect private wireless networks, especially in environments with separate employee and guest access.

'Disabling SSID broadcast can reduce the visibility of a wireless network, making it less likely to be detected by casual attackers. This should be combined with strong encryption and authentication.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security section, Cisco Networking Academy)

A (IP filtering) provides limited protection and is harder to manage for employee devices.

B is correct: Disabling SSID broadcast adds an extra layer of obscurity for the employee network.

C would make the network easier to access from outside the premises, which is less secure.

D would cause network conflicts and make segmentation impossible.

The CCST Cybersecurity Study Guide specifies that AES (Advanced Encryption Standard) is the encryption method used in modern WiFi security protocols like WPA2 and WPA3.

'WPA2 and WPA3 use the Advanced Encryption Standard (AES) for securing wireless traffic. AES provides strong symmetric encryption, replacing outdated methods like WEP and TKIP.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security section, Cisco Networking Academy)

A (DES) is outdated and insecure.

B (Triple DES) is older and slower, rarely used in WiFi.

C is correct: AES is the industry standard for WiFi security.

D (RSA) is asymmetric encryption used in key exchange, not bulk WiFi encryption.