CiscoAssociate level100-160Page 3 of 3

100-160 exam dumps: questions 201 to 264 of 264

Page 3 of the free 100-160 question bank for the Cisco Certified Support Technician (CCST) Cybersecurity exam. Questions 201 to 264 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated January 2025

Start timed practice exam Questions 201 to 264

Free 100-160 practice questions

Questions 201 to 205 of 264

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

100-160 Question 201

Single answer

Your organization has identified a vulnerability in its web application that could allow attackers to perform SQL injection attacks. However, the web application is not publicly accessible and is only used by a small internal team. Based on this scenario, how should the associated risk be ranked, and what approach to risk management would be most appropriate?

A
Rank the risk as high and immediately implement a vulnerability patch.
B
Rank the risk as medium and monitor the application for suspicious activity.
C
Rank the risk as low and document the vulnerability for future review.
D
Rank the risk as extremely high and shut down the application until the vulnerability is fixed.

Show answer and explanation

Correct answer: C

Explanation

The risk ranking should consider both the likelihood of exploitation and the impact if the vulnerability is exploited. In this scenario, the likelihood is low because the application is not publicly accessible, and the impact is limited to a small internal team. This justifies ranking the risk as low and opting for documentation rather than immediate action or extreme measures like shutting down the application.

A. Incorrect.
This option is incorrect because the application is not publicly accessible, and the limited exposure reduces the likelihood of exploitation. Immediate action may not be necessary in this scenario.
B. Incorrect.
While monitoring is a viable strategy, ranking the risk as medium may overestimate the likelihood and impact of exploitation given the internal-only access.
C. Correct.
This is the correct answer because the vulnerability exists, but the risk is low due to the mitigated exposure (internal-only access). Documenting the issue allows the organization to address it in future updates without allocating unnecessary immediate resources.
D. Incorrect.
This option is incorrect because shutting down the application for a low-risk vulnerability would be an overreaction and could negatively impact the internal team's productivity.

100-160 Question 202

Single answer

A small business has discovered a vulnerability in their web application that allows unauthorized users to bypass authentication and access sensitive customer data. The business owner decides to implement multi-factor authentication (MFA) as a way to address this issue. How should this decision be categorized in the risk management process?

A
Risk Avoidance
B
Risk Transfer
C
Risk Mitigation
D
Risk Acceptance

Show answer and explanation

Correct answer: C

Explanation

Risk Mitigation is a key part of the risk management process where measures are taken to reduce the likelihood or impact of a risk. In this scenario, the business owner is addressing the vulnerability by implementing MFA, which reduces the likelihood of unauthorized access to sensitive data. This clearly categorizes the action as Risk Mitigation.

A. Incorrect.
Risk Avoidance involves eliminating the activity that introduces the risk entirely. Implementing MFA does not remove the web application or the associated risk, so this is incorrect.
B. Incorrect.
Risk Transfer involves shifting the risk to another party, such as through insurance or outsourcing. Implementing MFA does not transfer the risk, so this is incorrect.
C. Correct.
Risk Mitigation involves taking steps to reduce the likelihood or impact of a risk. Implementing MFA reduces the likelihood of unauthorized access by adding an additional security layer, making this the correct choice.
D. Incorrect.
Risk Acceptance involves knowingly accepting the risk without taking action. Since the business owner is actively implementing MFA to address the risk, this is incorrect.

100-160 Question 203

Single answer

A cybersecurity analyst discovers a vulnerability in a web application that could allow an attacker to execute malicious scripts. The likelihood of exploitation is high, and the web application handles sensitive customer data, including credit card information. How should the analyst prioritize this risk in a risk management process?

A
Classify the risk as low and document it for future review.
B
Classify the risk as medium and monitor it periodically.
C
Classify the risk as high and recommend immediate mitigation actions.
D
Classify the risk as extremely high and shut down the web application immediately.

Show answer and explanation

Correct answer: C

Explanation

The analyst should classify the risk as high because of the combination of a high likelihood of exploitation and the potential impact on sensitive customer data. Immediate mitigation actions, such as applying patches or implementing security controls, are crucial in addressing the vulnerability while maintaining the application's availability. Classifying the risk as either too low or too extreme would either underestimate or overestimate the situation, leading to inappropriate responses.

A. Incorrect.
Classifying the risk as low is inappropriate since the likelihood is high, and the data at risk is sensitive (credit card information). This would underestimate the potential impact.
B. Incorrect.
Classifying the risk as medium and only monitoring it does not align with the high likelihood and the critical nature of the data involved. This could delay necessary action.
C. Correct.
Classifying the risk as high and recommending immediate mitigation actions is appropriate because the likelihood of exploitation is high, and the impact on sensitive data could be severe.
D. Incorrect.
Classifying the risk as extremely high and immediately shutting down the web application might be an overreaction unless there is already evidence of active exploitation. Risk management aims to balance mitigation with operational needs.

100-160 Question 204

Single answer

A cybersecurity analyst discovers that a web application used by the organization has a vulnerability that could allow attackers to execute malicious code. However, the application is hosted on an isolated server with no direct internet access. How should the analyst classify the risk level and determine the best approach to mitigate it?

A
Classify the risk as Extremely High and immediately shut down the server.
B
Classify the risk as Low and track it for potential changes in the environment.
C
Classify the risk as Medium and apply patches or configurations to mitigate the vulnerability.
D
Classify the risk as High and implement additional network monitoring for the server.

Show answer and explanation

Correct answer: C

Explanation

The vulnerability presents a potential risk that is currently mitigated by the server's isolated environment, which reduces the immediate threat exposure. However, vulnerabilities that allow code execution should still be addressed to avoid future escalation if the environment changes. Classifying the risk as Medium and applying patches or configuration changes is a proactive risk management strategy that balances mitigation efforts with the current level of exposure.

A. Incorrect.
Classifying the risk as Extremely High and shutting down the server is not appropriate because the threat exposure is limited due to the server's isolation. This would also unnecessarily impact business operations.
B. Incorrect.
Classifying the risk as Low is incorrect because vulnerabilities that allow code execution can have serious consequences if exposure changes, even if current risk is minimized by isolation.
C. Correct.
Classifying the risk as Medium and applying patches or configurations is the correct answer because the vulnerability exists and could escalate if the environment changes. Mitigating it proactively is a balanced approach.
D. Incorrect.
Classifying the risk as High and implementing additional monitoring is not the best approach in this scenario since the server is isolated and the risk level does not warrant such a classification.

100-160 Question 205

Select 3

An organization has discovered a vulnerability in one of its web applications that could allow attackers to execute SQL injection attacks. The application is used to process sensitive customer data, and a successful attack could lead to data theft. Based on this scenario, which of the following statements reflects the correct approach to managing this risk?

A
Apply input validation and parameterized queries to mitigate the vulnerability.
B
Accept the risk, as the likelihood of exploitation is extremely low.
C
Determine the level of risk by assessing the likelihood of exploitation and the potential impact.
D
Disregard the vulnerability since no attacks have been reported so far.
E
Implement a web application firewall (WAF) to reduce the likelihood of exploitation.

Show answer and explanation

Correct answers: A, C, E

Explanation

Effective risk management involves identifying vulnerabilities, assessing the associated risks (likelihood and impact), and implementing appropriate mitigation strategies. In this scenario, applying input validation and parameterized queries directly addresses the vulnerability, while a WAF provides an additional layer of protection. Assessing the risk level ensures that the organization can prioritize and respond appropriately. Accepting or ignoring the risk without proper evaluation is not a recommended cybersecurity practice.

A. Correct.
Applying input validation and parameterized queries is a direct mitigation strategy to address SQL injection vulnerabilities. This reduces the likelihood of exploitation.
B. Incorrect.
Accepting the risk without further analysis is not a recommended approach, as the potential impact (data theft) is significant, and the likelihood of exploitation must first be properly assessed.
C. Correct.
Determining the level of risk by analyzing the likelihood and impact is a critical step in risk management. It helps prioritize the vulnerability and decide on appropriate actions.
D. Incorrect.
Disregarding the vulnerability is not a responsible approach to cybersecurity, particularly for a vulnerability that could lead to significant data theft.
E. Correct.
Implementing a web application firewall (WAF) can help reduce the likelihood of exploitation by blocking malicious traffic targeting the vulnerability.

Timed practice exam

Take a 100-160 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

100-160 practice questions 201 to 264 of 264

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 3 pages of up to 100 questions.