Cisco Certified Support Technician (CCST) Cybersecurity Free Sample Questions

A Tier 1 SOC analyst at a regional financial institution is reviewing a security incident where a distributed denial-of-service (DDoS) attack overwhelmed the customer-facing banking portal, rendering it inaccessible for four hours. No data was stolen or altered during the incident. Which core component of the CIA triad was primarily compromised in this scenario?

A cybersecurity intelligence report indicates that a highly sophisticated, well-funded group is attempting to steal proprietary aerospace blueprints from a defense contractor. The group uses custom-developed malware and maintains persistent, stealthy access over several months. Based on these characteristics, which type of threat actor is MOST likely responsible?

During a security briefing, an IT support technician is asked to identify the defining characteristics of a botnet. Which TWO of the following attributes are essential components of a botnet architecture? (Select TWO)

A physical security consultant is hired to test the defenses of a logistics company's main headquarters. The consultant arrives at the facility during the morning rush hour. Carrying two large boxes of donuts, the consultant approaches the secure entrance just as an employee swipes their RFID badge. The employee politely holds the door open, allowing the consultant to enter without badging in.

Once inside, the consultant walks to an empty cubicle and leaves a USB flash drive labeled 'Q3 Executive Bonuses' on the desk. An hour later, an employee finds the drive, plugs it into their workstation, and unknowingly executes a hidden payload that establishes a reverse shell to the consultant's server.

Which combination of attack vectors did the consultant successfully utilize in this scenario?

A systems administrator is explaining the AAA framework to a new help desk employee. The administrator notes that when a user attempts to access a network device, the system first verifies the user's identity, then determines what commands the user is allowed to execute, and finally logs the commands the user actually runs. Which component of AAA is responsible for determining what commands the user is allowed to execute?

True or False: Hashing is a reversible cryptographic process that allows the original plaintext data to be recovered by applying the correct decryption key.