Cisco 100-160 Dumps Questions Answers

TheCCST Cybersecuritycourse states that anIntrusion Detection System (IDS)passively monitors network or system traffic and analyzes it against a database of known threat signatures or behavioral patterns.

"IDS devices inspect network traffic, compare it to known malicious signatures or anomalies, and generate alerts for suspicious activity without actively blocking traffic."

(CCST Cybersecurity,Basic Network Security Concepts, IDS and IPS section, Cisco Networking Academy)

Ais correct: IDS is passive and signature-based.

B(IPS) is active and can block traffic.

C(Proxy Server) handles requests between clients and servers.

D(Honeypot) is a decoy system to attract attackers.

TheCCST Cybersecuritycourse explains that MAC address filtering is a network access control method that allows only approved device hardware addresses to connect. While not foolproof against spoofing, it can block a specific device from reconnecting to a small home network.

"MAC address filtering restricts network access to devices whose unique hardware addresses are explicitly allowed. This can be used to block known unauthorized devices from reconnecting."

(CCST Cybersecurity,Basic Network Security Concepts, Wireless Security Controls section, Cisco Networking Academy)

Ais incorrect: IP ACLs are better for controlling traffic types, not blocking specific devices at the router level.

Bis correct: It prevents the device’s hardware address from reconnecting.

Cis temporary since the host can get a new IP via DHCP.

Dmay hide the network but will not stop a determined attacker who can still detect it.

TheCCST Cybersecurity Study Guidestates that after confirming a vulnerability is relevant and critical, the next step is to apply available patches or mitigations as soon as possible to reduce the attack surface.

"When a critical vulnerability is identified, remediation steps such as applying patches or configuration changes should be implemented immediately to prevent exploitation."

(CCST Cybersecurity,Vulnerability Assessment and Risk Management, Vulnerability Remediation section, Cisco Networking Academy)