CCST Network Security & Best Practices 3

Question 1

Which security practice involves assigning users only the permissions they need to perform their job functions?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits users and processes to only the access rights they need, reducing the attack surface.

Question 2

What is the function of DHCP snooping on a Cisco switch?

Accepted Answer

Prevents unauthorized DHCP servers from assigning IP addresses

Answer

DHCP snooping identifies trusted DHCP server ports and drops DHCP offers from untrusted ports, preventing rogue DHCP servers.

Question 3

Which type of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan horse

Answer

A Trojan horse is malware that masquerades as legitimate or desirable software to deceive users into executing it.

Question 4

A company wants to ensure that if one employee's credentials are compromised, the attacker cannot access all systems. Which security principle best addresses this?

Accepted Answer

Network segmentation with least privilege

Answer

Combining network segmentation with least privilege limits what any single compromised account can access across the network.

Question 5

What is the purpose of a honeypot in network security?

Accepted Answer

To attract and detect attackers by simulating a vulnerable system

Answer

A honeypot is a decoy system designed to lure attackers, allowing security teams to study attack methods and detect intrusions.

(CCST) Cisco Certified Support Technician Networking Practice Test

(CCST) Cisco Certified Support Technician Networking Practice Test

CCST Network Security & Best Practices 3