100-160 Dumps with Practice Exam Questions Answers

TheCCST Cybersecurity Study Guideexplains that hard disk encryption is a method used to protectdata stored on a physical devicefrom unauthorized access.

"Data at rest refers to data stored on a device, such as files on a hard drive, SSD, or removable media. Hard disk encryption protects data at rest by converting it into an unreadable format unless accessed with the correct decryption key."

(CCST Cybersecurity,Essential Security Principles, Data States and Protection Methods section, Cisco Networking Academy)

Data in processrefers to data actively being handled by applications in memory (RAM), which is not the primary target of disk encryption.

Data in transitis protected via encryption methods such as TLS, not disk encryption.

Data in useis accessed and manipulated by programs in real-time, also not the primary scope of disk encryption.

Data at restis the correct answer, as hard disk encryption directly safeguards stored files.

TheCCST Cybersecurity Study Guidespecifies that bothWiresharkandtcpdumpare packet capture tools that can record network traffic to a file for later analysis.

"Wireshark provides a graphical interface for packet capture and analysis. Tcpdump is a command-line tool that captures packets for detailed offline review."

(CCST Cybersecurity,Incident Handling, Network Traffic Analysis section, Cisco Networking Academy)

Ais correct: Wireshark is widely used for packet capture and analysis.

Bis correct: tcpdump is a CLI-based packet capture tool.

C(Nmap) is for network scanning, not packet capture.

D(netstat) displays network connections and ports but does not capture packets.

TheCCST Cybersecurity Study Guideexplains thatport securityon switches can be configured to limit the number of MAC addresses allowed on a port, or to restrict it to specific devices.

"Port security can prevent unauthorized access by limiting or specifying the MAC addresses allowed to connect through a given switch port. This mitigates risks from rogue devices connecting to the network."

(CCST Cybersecurity,Basic Network Security Concepts, Switch Security section, Cisco Networking Academy)

TheCCST Cybersecurity Study Guidenotes that HIPAA (Health Insurance Portability and Accountability Act) requires that ePHI be protected both in storage and when devices are decommissioned or repurposed. This includes implementingdata removal policiesfor mobile devices.

"HIPAA requires procedures for the removal of electronic protected health information (ePHI) from devices before disposal, reuse, or reassignment."

(CCST Cybersecurity,Essential Security Principles, Regulatory Compliance section, Cisco Networking Academy)

TheCCST Cybersecurity Study Guidecovers major privacy and security frameworks:

GDPR (General Data Protection Regulation)–

"EU regulation that protects personal data and privacy for individuals within the European Union."

HIPAA (Health Insurance Portability and Accountability Act)–

"US law that protects sensitive patient health information from being disclosed without the patient’s consent or knowledge."

PCI-DSS (Payment Card Industry Data Security Standard)–

"Security standard to protect credit card data and reduce fraud."

FERPA (Family Educational Rights and Privacy Act)–

"US law that protects the privacy of student education records."

FISMA (Federal Information Security Management Act)–

"US law that requires federal agencies to protect information and information systems."

(CCST Cybersecurity,Essential Security Principles, Regulatory Compliance section, Cisco Networking Academy)