Question 1

Which AWS service can be used to secure data at rest in Amazon S3?

Options :

A : AWS CloudTrail

B : AWS Key Management Service (KMS)

C : AWS Identity and Access Management (IAM)

D : AWS Shield

Answer: B

Question 2

An administrator wants to ensure that any files downloaded from the internet are automatically scanned for malicious code before execution. Which security control should be implemented?

Options :

A : Host-based firewall

B : Anti-malware with real-time protection

C : VPN client

D : Patch management system

Answer: B

Question 3

Which of the following is a common security threat that uses social engineering techniques to deceive users into providing sensitive information?

Options :

A : Phishing

B : DDoS

C : XSS

D : Ransomware

Answer: A

Question 4

You are collecting data after a suspected intrusion on the local LAN. You need to capture incoming IP packets to a file for an investigator to analyze. Which two tools should you use? (Choose 2.)

Options :

A : Wireshark

B : tcpdump

C : Nmap

D : netstat

Answer: A,B

Question 5

Which of the following is a key component of endpoint security?

Options :

A : Firewall

B : Intrusion Detection System

C : Data Loss Prevention

D : Virtual Private Network

Answer: C

Free CCST-Cybersecurity Mock Exam – Practice Online Confidently

Buying Options: