CiscoAssociate level100-160Page 2 of 3

100-160 exam dumps: questions 101 to 200 of 264

Page 2 of the free 100-160 question bank for the Cisco Certified Support Technician (CCST) Cybersecurity exam. Questions 101 to 200 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated January 2025

Start timed practice exam Questions 101 to 200

Free 100-160 practice questions

Questions 101 to 105 of 264

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

100-160 Question 101

Single answer

A company has recently implemented a network security policy requiring only authorized devices to access their internal network. During an audit, it was discovered that unauthorized devices were able to connect to the network, even though the firewall and VPN were properly configured. Which security solution should the company implement to address this issue?

A
Access Control Lists (ACLs)
B
Network Access Control (NAC)
C
Additional VPN Tunnels
D
Web Application Firewall (WAF)

Show answer and explanation

Correct answer: B

Explanation

The correct answer is Network Access Control (NAC) because it enforces device authentication and compliance policies before granting access to the network. While other solutions like ACLs, VPNs, and WAFs are important for security, they do not specifically address the issue of unauthorized devices connecting to the network.

A. Incorrect.
Access Control Lists (ACLs) are used to filter traffic based on IP addresses, protocols, or ports, but they cannot validate whether a device is authorized to connect to the network.
B. Correct.
Network Access Control (NAC) ensures that only authorized and compliant devices can access the network by enforcing security policies, making it the appropriate solution for this scenario.
C. Incorrect.
Additional VPN Tunnels provide secure communication but do not control or validate which devices are allowed to access the network.
D. Incorrect.
Web Application Firewalls (WAFs) protect web applications by filtering and monitoring HTTP traffic, but they do not address device-level access control.

100-160 Question 102

Select 3

A company wants to secure remote access for its employees while ensuring that only authorized devices can connect to the network. They also need to restrict access to specific internal resources based on employee roles. Which combination of technologies would best meet these requirements?

A
Access Control Lists (ACLs)
B
Firewall
C
Virtual Private Network (VPN)
D
Network Access Control (NAC)
E
Intrusion Detection System (IDS)

Show answer and explanation

Correct answers: A, C, D

Explanation

The combination of ACLs, VPN, and NAC addresses the company's requirements. VPN provides secure remote access, NAC ensures that only authorized and compliant devices can connect, and ACLs restrict access to internal resources based on employee roles. Firewalls and IDS, while important in network security, do not directly fulfill the specific requirements described in the scenario.

A. Correct.
Access Control Lists (ACLs) are used to define rules for network traffic, enabling or denying access to specific resources based on IP addresses, protocols, or ports. This helps restrict access to internal resources.
B. Incorrect.
Firewalls protect the network by filtering incoming and outgoing traffic based on predefined security rules. While important, they do not directly address device authorization or role-based access.
C. Correct.
Virtual Private Network (VPN) ensures secure remote access by encrypting the connection between remote devices and the internal network.
D. Correct.
Network Access Control (NAC) ensures that only authorized devices that meet security requirements (e.g., up-to-date antivirus, correct configurations) can connect to the network.
E. Incorrect.
Intrusion Detection System (IDS) monitors network traffic for suspicious activities or known threats but does not handle secure remote access or device authorization.

100-160 Question 103

Select 2

Your company has implemented a VPN for secure remote access and a firewall to monitor incoming and outgoing traffic. Recently, unauthorized devices have been detected on the company network. To address this issue, the IT team plans to enforce device authentication and ensure only approved devices can connect. Which combination of technologies should be used to achieve this goal?

A
Configure a Network Access Control (NAC) system to enforce device compliance
B
Update the firewall rules to block all traffic from unauthorized IP addresses
C
Enable an Access Control List (ACL) to allow traffic only from approved MAC addresses
D
Utilize the VPN client to require user authentication and device verification
E
Disable the VPN entirely to prevent remote access

Show answer and explanation

Correct answers: A, D

Explanation

To address unauthorized devices, a combination of technologies is needed to enforce both device compliance and secure remote access. Network Access Control (NAC) ensures that only compliant, authorized devices can connect to the network. Additionally, configuring the VPN to require both user authentication and device verification adds an extra layer of security for remote access. Together, these solutions effectively mitigate the issue of unauthorized devices while maintaining secure connectivity.

A. Correct.
Network Access Control (NAC) can enforce device compliance by verifying the device's identity and ensuring it meets security policies before granting access to the network. This is an effective solution for addressing unauthorized devices.
B. Incorrect.
While updating firewall rules may help in blocking some unauthorized traffic, firewalls typically operate at the network level and do not enforce device-specific authentication or compliance.
C. Incorrect.
Access Control Lists (ACLs) can control network traffic to specific devices, but managing MAC addresses at scale is not practical and does not verify device compliance.
D. Correct.
VPNs can provide secure remote access and, when configured properly, can be used to verify both user credentials and device compliance, making this a suitable approach to enforce secure access.
E. Incorrect.
Disabling the VPN would block legitimate remote users from accessing the network and would not resolve the issue of unauthorized devices already connected.

100-160 Question 104

Single answer

A company has recently experienced multiple unauthorized access attempts to its internal network. The security team decides to implement additional measures. They configure an access control list (ACL) on their firewall to block traffic from specific IP ranges and set up a VPN with multi-factor authentication (MFA) for remote employees. However, unauthorized devices are still being connected to the internal network. Which solution should the security team implement to address this issue?

A
Enable Network Access Control (NAC) to enforce device compliance policies.
B
Expand the existing ACL to include MAC address filtering for internal devices.
C
Implement a stronger encryption protocol for the VPN.
D
Increase the logging level on the firewall to monitor internal traffic.

Show answer and explanation

Correct answer: A

Explanation

The issue of unauthorized devices connecting to the internal network requires a solution that can assess and enforce compliance on all devices before granting access. Network Access Control (NAC) is specifically designed to ensure that only authorized and compliant devices are allowed to connect, making it the appropriate solution in this scenario.

A. Correct.
Network Access Control (NAC) ensures that only compliant devices (e.g., those with proper security patches and configurations) can connect to the network. This directly addresses the issue of unauthorized devices being connected.
B. Incorrect.
ACLs are effective for controlling traffic based on IP addresses or other parameters, but they are not designed to evaluate the compliance of devices or enforce security policies for connected devices.
C. Incorrect.
Implementing a stronger encryption protocol for the VPN enhances the security of remote access but does not address unauthorized devices connecting to the internal network.
D. Incorrect.
Increasing the logging level on the firewall helps with monitoring and identifying malicious activities but does not proactively prevent unauthorized devices from connecting.

100-160 Question 105

Select 3

A company has recently deployed a network access control (NAC) solution to ensure that only authorized and compliant devices can connect to their internal network. During testing, the IT team notices that unauthorized devices are still able to access certain network resources. Which of the following actions should the team take to fix this issue?

A
Verify that the NAC policies are properly configured to block unauthorized devices.
B
Ensure the firewall rules are updated to restrict access to sensitive resources.
C
Implement an Access Control List (ACL) to explicitly deny unauthorized devices at the network level.
D
Disable the VPN to prevent remote access to the network.
E
Check if unauthorized devices are spoofing MAC addresses to bypass NAC.

Show answer and explanation

Correct answers: A, C, E

Explanation

To resolve the issue, the IT team needs to ensure that NAC policies are correctly configured to enforce device compliance, use ACLs to explicitly deny unauthorized devices at the network level, and investigate potential MAC address spoofing attempts. These actions address the root causes of the problem while ensuring the NAC solution operates as intended.

A. Correct.
NAC relies on properly configured policies to identify and block unauthorized devices. If policies are not correctly set up, unauthorized devices may still gain access.
B. Incorrect.
While firewalls are important for network security, updating firewall rules alone does not directly address NAC-related issues. This is not the best solution in this scenario.
C. Correct.
An ACL can be used to enforce access restrictions at the network level, complementing the NAC solution by explicitly denying access to unauthorized devices.
D. Incorrect.
Disabling the VPN is not a solution to the problem described. It would prevent legitimate remote users from accessing the network but would not address unauthorized devices connecting locally.
E. Correct.
MAC address spoofing can be used to bypass NAC enforcement. Identifying and mitigating this tactic is crucial for ensuring NAC effectiveness.

Timed practice exam

Take a 100-160 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

100-160 practice questions 101 to 200 of 264

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 3 pages of up to 100 questions.