Cisco 100-160 Exam Dumps

The CCST Cybersecurity Study Guide explains that CVSS (Common Vulnerability Scoring System) is a standardized method for rating the severity of software vulnerabilities. It considers exploitability, impact, and environmental factors.

'The Common Vulnerability Scoring System (CVSS) provides a numerical score that reflects the severity of a vulnerability, enabling prioritization of remediation efforts.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Vulnerability Scoring section, Cisco Networking Academy)

The CCST Cybersecurity course describes ransomware as a form of malicious software that encrypts or locks access to an organization's data, demanding payment for its release.

'Ransomware is a type of malware that denies access to data by encrypting it and demands payment from the victim to restore access. Threat actors may deliver ransomware through phishing emails, malicious downloads, or exploiting vulnerabilities in exposed systems.'

(CCST Cybersecurity, Essential Security Principles, Malware Types and Threats section, Cisco Networking Academy)

A describes spyware or information-stealing malware.

B is website defacement, which is vandalism, not ransomware.

C is correct: locking/encrypting data and demanding payment is the defining behavior of ransomware.

D is more aligned with insider threat or espionage activities.

According to the CCST Cybersecurity Study Guide, firmware updates are a critical security maintenance task because vulnerabilities in firmware can be exploited by attackers to gain persistent control over hardware.

'Keeping firmware up to date is necessary to patch security vulnerabilities and weaknesses that could be exploited by threat actors. Vendors release firmware updates to correct security flaws, enhance stability, and ensure compatibility with updated security protocols.'

(CCST Cybersecurity, Endpoint Security Concepts, System and Firmware Maintenance section, Cisco Networking Academy)

A is partially true but not the primary security reason for updates.

B is incorrect because firmware is not part of the OS kernel; it's embedded in the hardware.

C is correct: patching vulnerabilities in firmware is essential for endpoint protection.

D may occur as a side benefit, but it's not the main reason from a cybersecurity perspective.

The CCST Cybersecurity course describes that risk scoring for vulnerabilities often involves likelihood and impact --- similar to the CVSS (Common Vulnerability Scoring System) model.

'When prioritizing vulnerabilities, assess both the likelihood of exploitation and the potential impact to the organization. Likelihood measures how easy or probable it is for an adversary to exploit the weakness, while impact measures the consequences to confidentiality, integrity, and availability if exploitation occurs.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Risk Assessment and Prioritization section, Cisco Networking Academy)

A is correct: Likelihood is a fundamental part of severity assessment.

B is correct: Impact determines how damaging an exploit would be.

C is incorrect: Time to choose replacement software is an operational consideration, not a severity metric.

D is incorrect: Hardware age may influence performance but does not directly define vulnerability severity.

The CCST Cybersecurity Study Guide explains that disabling SSID broadcast hides the network from casual scanning, adding a layer of obscurity. While not a complete security measure, when combined with WPA2/WPA3 encryption and strong passwords, it can help protect private wireless networks, especially in environments with separate employee and guest access.

'Disabling SSID broadcast can reduce the visibility of a wireless network, making it less likely to be detected by casual attackers. This should be combined with strong encryption and authentication.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security section, Cisco Networking Academy)

A (IP filtering) provides limited protection and is harder to manage for employee devices.

B is correct: Disabling SSID broadcast adds an extra layer of obscurity for the employee network.

C would make the network easier to access from outside the premises, which is less secure.

D would cause network conflicts and make segmentation impossible.