Cisco 100-160 Exam Dumps

The CCST Cybersecurity Study Guide explains that WPA3 is the most current and secure Wi-Fi Protected Access protocol, offering stronger encryption and better protection against brute-force attacks compared to earlier versions.

'WPA3 improves wireless security by using more robust encryption methods and protections against offline password guessing, making it the recommended protocol for securing modern Wi-Fi networks.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security Protocols section, Cisco Networking Academy)

The CCST Cybersecurity Study Guide explains that port security on switches can be configured to limit the number of MAC addresses allowed on a port, or to restrict it to specific devices.

'Port security can prevent unauthorized access by limiting or specifying the MAC addresses allowed to connect through a given switch port. This mitigates risks from rogue devices connecting to the network.'

(CCST Cybersecurity, Basic Network Security Concepts, Switch Security section, Cisco Networking Academy)

The CCST Cybersecurity course highlights that signs of brute-force attacks followed by successful access require immediate account security actions and an investigation to determine if other systems were accessed.

'When suspicious login activity is detected, immediate containment steps such as password resets and log analysis are necessary to limit damage and identify the extent of the compromise.'

(CCST Cybersecurity, Incident Handling, Account Compromise Response section, Cisco Networking Academy)

The CCST Cybersecurity course states that an Intrusion Detection System (IDS) passively monitors network or system traffic and analyzes it against a database of known threat signatures or behavioral patterns.

'IDS devices inspect network traffic, compare it to known malicious signatures or anomalies, and generate alerts for suspicious activity without actively blocking traffic.'

(CCST Cybersecurity, Basic Network Security Concepts, IDS and IPS section, Cisco Networking Academy)

A is correct: IDS is passive and signature-based.

B (IPS) is active and can block traffic.

C (Proxy Server) handles requests between clients and servers.

D (Honeypot) is a decoy system to attract attackers.

The CCST Cybersecurity course describes ransomware as a form of malicious software that encrypts or locks access to an organization's data, demanding payment for its release.

'Ransomware is a type of malware that denies access to data by encrypting it and demands payment from the victim to restore access. Threat actors may deliver ransomware through phishing emails, malicious downloads, or exploiting vulnerabilities in exposed systems.'

(CCST Cybersecurity, Essential Security Principles, Malware Types and Threats section, Cisco Networking Academy)

A describes spyware or information-stealing malware.

B is website defacement, which is vandalism, not ransomware.

C is correct: locking/encrypting data and demanding payment is the defining behavior of ransomware.

D is more aligned with insider threat or espionage activities.