Question 1

Which AWS service can be used to secure data at rest in Amazon S3?

Options :

A : AWS CloudTrail

B : AWS Key Management Service (KMS)

C : AWS Identity and Access Management (IAM)

D : AWS Shield

Answer: B

Question 2

An administrator wants to ensure that any files downloaded from the internet are automatically scanned for malicious code before execution. Which security control should be implemented?

Options :

A : Host-based firewall

B : Anti-malware with real-time protection

C : VPN client

D : Patch management system

Answer: B

Question 3

What should you create to prevent spoofing of the internal network?

Options :

A : A NAT rule

B : An ACL

C : A record in the host file

D : A DNS record

Answer: B

Question 4

What is the purpose of a firewall?

Options :

A : To prevent unauthorized access to a network

B : To optimize network performance

C : To provide secure remote access

D : To detect and respond to security incidents

Answer: A

Question 5

Which network security technology passively monitors network traffic and compares the captured packet stream with known malicious signatures?

Options :

A : IDS

B : IPS

C : Proxy Server

D : Honeypot

Answer: A

Free CCST-Cybersecurity Mock Exam – Practice Online Confidently

Buying Options: