Question 1

Which of the following is a common security threat that uses social engineering techniques to deceive users into providing sensitive information?

Options :

A : Phishing

B : DDoS

C : XSS

D : Ransomware

Answer: A

Question 2

Which of the following is a best practice for ensuring secure identity and access management?

Options :

A : Maintaining a single administrator account for all employees

B : Granting elevated privileges to all users by default

C : Implementing multi-factor authentication

D : Sharing passwords over email

Answer: C

Question 3

An administrator wants to ensure that any files downloaded from the internet are automatically scanned for malicious code before execution. Which security control should be implemented?

Options :

A : Host-based firewall

B : Anti-malware with real-time protection

C : VPN client

D : Patch management system

Answer: B

Question 4

Which two basic metrics should be taken into consideration when assigning a severity to a vulnerability during an assessment? (Choose 2.)

Options :

A : The likelihood that an adversary can and will exploit the vulnerability

B : The impacts that an exploit of the vulnerability will have on the organization

C : The time involved in choosing replacement software to replace older systems

D : The age of the hardware running the software that contains the vulnerability

Answer: A,B

Question 5

Which type of firewall can analyze network traffic at the application layer of the OSI model?

Options :

A : Packet-filtering firewall

B : Stateful inspection firewall

C : Proxy firewall

D : Next-generation firewall

Answer: C

Free CCST-Cybersecurity Mock Exam – Practice Online Confidently

Buying Options: