Cisco 100-160 Exam Dumps

According to the CCST Cybersecurity course, anti-malware solutions with real-time protection scan files as they are downloaded or opened, blocking malicious code before it runs.

'Real-time protection automatically inspects files, applications, and scripts as they are accessed or downloaded, preventing execution of malicious code.'

(CCST Cybersecurity, Endpoint Security Concepts, Malware Protection section, Cisco Networking Academy)

The CCST Cybersecurity course teaches that vulnerability scan results should be reviewed for misconfigurations and exposures that can be exploited by attackers.

'Disabled firewalls expose systems to direct network attacks and should be treated as critical findings. Open ports can indicate unnecessary or unsecured services running, which may provide entry points for attackers. These findings should be escalated for remediation or further security hardening.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Analyzing and Responding to Scan Results section, Cisco Networking Academy)

Encrypted passwords (A) are good practice, not a vulnerability.

Disabled firewalls (B) leave systems defenseless against incoming attacks.

Open ports (C) can be exploited if the services they expose are vulnerable or misconfigured.

SSH packets (D) are normal in secure remote administration and are not inherently a vulnerability.

The CCST Cybersecurity Study Guide states that vulnerability scanning is an automated process used to identify known security weaknesses in systems, software, and network devices. These scans compare system configurations and software versions against databases of known vulnerabilities, such as the Common Vulnerabilities and Exposures (CVE) list.

'A vulnerability scan is an automated test that checks systems and networks for known weaknesses by matching them against a database of vulnerabilities such as CVEs. This allows administrators to identify exploitable conditions before they are leveraged by attackers.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Vulnerability Scanning section, Cisco Networking Academy)

A is asset discovery, not vulnerability scanning.

B may be part of remediation planning but is not the primary purpose.

C is correct: Scans detect if systems have vulnerabilities associated with CVEs.

D describes SIEM (Security Information and Event Management) log correlation, not vulnerability scanning.

The CCST Cybersecurity course describes that risk scoring for vulnerabilities often involves likelihood and impact --- similar to the CVSS (Common Vulnerability Scoring System) model.

'When prioritizing vulnerabilities, assess both the likelihood of exploitation and the potential impact to the organization. Likelihood measures how easy or probable it is for an adversary to exploit the weakness, while impact measures the consequences to confidentiality, integrity, and availability if exploitation occurs.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Risk Assessment and Prioritization section, Cisco Networking Academy)

A is correct: Likelihood is a fundamental part of severity assessment.

B is correct: Impact determines how damaging an exploit would be.

C is incorrect: Time to choose replacement software is an operational consideration, not a severity metric.

D is incorrect: Hardware age may influence performance but does not directly define vulnerability severity.

The CCST Cybersecurity Study Guide explains that sandboxing is a security technique that executes suspicious programs in a controlled and isolated environment, preventing them from affecting production systems while enabling behavior analysis.

'Sandboxing isolates a suspected application in a secure, controlled environment where it can be executed and analyzed without risking damage to the host system or network.'

(CCST Cybersecurity, Endpoint Security Concepts, Malware Analysis Techniques section, Cisco Networking Academy)