100-160 exam dumps

100-160 practice question 54 of 265

Cisco Certified Support Technician (CCST) Cybersecurity. Associate level, Cisco. Free question with the correct answer and a full explanation.

100-160 Question 54

Select 4

A company’s network administrator notices unusual activity on the network, such as unauthorized access attempts from external IP addresses. To mitigate this issue, the administrator decides to implement basic network security controls. Which of the following actions should the administrator prioritize?

  1. A

    Enable a firewall to filter incoming and outgoing traffic.

  2. B

    Configure strong passwords for all user accounts on the network.

  3. C

    Disable unused ports and services on network devices.

  4. D

    Allow unrestricted access to external IP addresses for easier troubleshooting.

  5. E

    Set up a guest network for visitors separate from the corporate network.

Show answer and explanation

Correct answers: A, B, C, E

Explanation

To strengthen basic network security, the administrator should focus on implementing measures that reduce vulnerabilities, such as enabling a firewall, enforcing strong passwords, disabling unused ports, and isolating guest traffic. Allowing unrestricted access to external IPs, however, poses a significant security risk and contradicts best practices.

  • A. Correct.

    Enabling a firewall is a fundamental step in controlling and monitoring network traffic, preventing unauthorized access.

  • B. Correct.

    Strong passwords reduce the likelihood of brute force attacks and unauthorized access to user accounts.

  • C. Correct.

    Disabling unused ports and services reduces the potential attack surface for malicious actors.

  • D. Incorrect.

    Allowing unrestricted access to external IP addresses increases the risk of unauthorized access and is not a recommended security practice.

  • E. Correct.

    Setting up a separate guest network isolates visitor traffic from the corporate network, reducing the risk of internal network compromise.

Timed practice exam

Take a 100-160 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam