CCST Network Security & Best Practices 4

Question 1

Which type of IDS/IPS detection method identifies threats by comparing traffic against a database of known attack signatures?

Accepted Answer

Signature-based detection

Answer

Signature-based detection compares network traffic or file hashes against a database of known malware or attack patterns.

Question 2

A user reports receiving an email claiming to be from IT support asking for their password to resolve an account issue. What type of attack is this?

Accepted Answer

Phishing

Answer

Phishing is a social engineering attack using deceptive emails that appear legitimate to trick users into revealing sensitive information.

Question 3

Which Cisco IOS command prevents brute-force login attempts by blocking access after repeated failed logins?

Accepted Answer

login block-for

Answer

The 'login block-for' command temporarily blocks login attempts after a specified number of failures within a given time window.

Question 4

What is the key difference between a stateful firewall and a stateless (packet-filtering) firewall?

Accepted Answer

Stateful firewalls track the state of active connections; stateless inspect each packet independently

Answer

A stateful firewall maintains a connection state table and can make decisions based on the context of a session, while stateless filters treat each packet independently.

Question 5

Which wireless security protocol replaced WEP and is currently considered the strongest standard for enterprise Wi-Fi authentication?

Accepted Answer

WPA3 Enterprise

Answer

WPA3 Enterprise is the current strongest Wi-Fi security standard, offering 192-bit minimum encryption and improved authentication over WPA2.

(CCST) Cisco Certified Support Technician Networking Practice Test

(CCST) Cisco Certified Support Technician Networking Practice Test

CCST Network Security & Best Practices 4