毎月、GOWUKAKUは1500人以上の受験者が試験準備を助けて、試験に合格するために受験者にご協力します
Cisco Certified Support Technician (CCST) Cybersecurity 試験
最新更新時間: 2026/09/21
【秋学習応援セール｜10月限定キャンペーン】：100-160 最新真題を買う時、日本語版と英語版両方を同時に獲得できます。
実際の問題集を練習し、試験のポイントを了解し、テストに申し込むするかどうかを決めることができます。
さらに試験準備時間の35％を節約するには、100-160 問題集を使用してください。
Question No : 1
Which protocol is commonly used for remote user authentication and authorization?
正解:
Explanation:
RADIUS (Remote Authentication Dial-In User Service) is a widely-used protocol for remote user authentication and authorization. It provides centralized authentication, authorization, and accounting management for users who dial in or connect remotely to a network. RADIUS uses a client-server model where the client (network access server) forwards user authentication requests to the RADIUS server for validation.
Question No : 2
Which of the following is a key principle of access management?
正解:
Explanation:
Access management is the process of controlling and managing user access to resources based on the principles of least privilege and need-to-know. The principle of least privilege ensures that users are only granted the minimum level of access necessary to perform their specific tasks, reducing the risk of
unauthorized access or privilege escalation. The need-to-know principle restricts access to sensitive information only to authorized individuals who require it for their job responsibilities. These principles contribute to a strong access control system by ensuring that access is only granted to those who genuinely need it and minimizing the potential for unauthorized access or data breaches.
Question No : 3
What does NAT stand for in networking?
正解:
Explanation:
NAT stands for Network Address Translation. It is a process used in networking to translate private IP addresses into public IP addresses, enabling devices with private addresses to communicate with devices on public networks like the internet.
Question No : 4
Which protocol is used for broadcasting and resolving MAC addresses to IP addresses?
正解:
Explanation:
ARP (Address Resolution Protocol) is used for broadcasting and resolving MAC (Media Access Control) addresses to IP addresses within a local network. It helps devices determine the MAC address associated with a given IP address, enabling proper communication on the network. ARP operates at the data link layer of the OSI model.
Question No : 5
Which technology actively inspects incoming and outgoing network traffic and takes immediate action to prevent security threats?
正解:
Explanation:
An Intrusion Prevention System (IPS) is a technology that actively inspects network traffic, both incoming and outgoing, and takes immediate action to prevent security threats. It not only identifies potential threats but also actively blocks or mitigates them in real-time.
Question No : 6
What is the primary goal of a threat actor in a cyber attack?
正解:
Explanation:
The primary goal of a threat actor in a cyber attack is typically to cause damage, disruption, or gain some form of unauthorized advantage. They may aim to steal sensitive data, encrypt files for ransom, disrupt services, or compromise the integrity of a system. Understanding the motivations of threat actors helps in building effective defense strategies.
Question No : 7
Which component of network security architecture is designed to separate the internal network from the external network?
正解:
Explanation:
A DMZ, or demilitarized zone, is a network segment that is used to separate the internal network from the external network. It acts as a buffer zone between the organization's network and the internet, providing an additional layer of security. By placing servers, such as web servers or email servers, in the DMZ, organizations can ensure that external traffic is filtered and scrutinized before reaching the internal network.
Question No : 8
Which type of encryption algorithm uses two different keys: a public key for encryption and a private key for decryption?
正解:
Explanation:
Asymmetric encryption, also known as public-key encryption, uses a pair of keys: a public key and a private key. The public key is used for encryption, while the private key is used for decryption. This allows for secure communication over an insecure channel, as the public key can be shared freely without compromising the security of the message.
Question No : 9
What is ransomware?
正解:
Explanation:
Ransomware is a type of malware that encrypts files on a victim's computer or network and then demands a ransom payment in exchange for the decryption key. It is a form of extortion and can cause significant damage and disruption to individuals and organizations.
Question No : 10
Which technology allows on-demand access to shared pools of configurable computing resources over a network?
正解:
Explanation:
Cloud computing refers to the delivery of on-demand computing resources, including servers, storage, databases, networking, software, and analytics, over the internet. It provides organizations with the ability to access and use shared pools of configurable computing resources quickly and easily, without the need for extensive upfront infrastructure investments. Cloud computing offers scalability, cost-efficiency, and flexibility, making it an essential component of modern IT environments.
Question No : 11
What is a common vulnerability in Internet of Things (IoT) devices?
正解:
Explanation:
IoT devices often suffer from multiple vulnerabilities. Weak encryption protocols make data transmission susceptible to interception and unauthorized access. Insufficient physical security measures can result in the theft or compromise of the device itself. Furthermore, the lack of user access controls and authentication mechanisms can allow unauthorized individuals to infiltrate and manipulate IoT devices.
Question No : 12
Which of the following is a recommended practice for securing a wireless SoHo network?
正解:
Explanation:
Regularly updating the router's firmware is a recommended practice for securing a wireless SoHo network. Router manufacturers often release firmware updates to address security vulnerabilities and improve performance. By installing the latest firmware updates, you can ensure that your router has the latest security patches. Disabling encryption (A) would make the network vulnerable to unauthorized access. Sharing Wi-Fi passwords with neighbors (C) may compromise security. Using the default network name (D) (SSID) can make it easier for attackers to identify and target your network.
Question No : 13
Which protocol is responsible for resolving IP addresses to domain names?
正解:
Explanation:
DNS (Domain Name System) is responsible for resolving IP (Internet Protocol) addresses to domain names. It translates human-readable domain names, such as www.example.com, into IP addresses, which are numerical identifiers used to locate and identify devices on a network.
Question No : 14
Which state of data is appropriate for encrypting sensitive information stored in a database?
正解:
Explanation:
Data at rest refers to data that is stored on storage devices such as hard drives, databases, or backups. Encrypting sensitive information in a database while it is at rest ensures that even if the database is compromised, the data remains protected, and unauthorized access or theft of the data becomes more challenging.
Question No : 15
What is the main motivation for attackers to conduct cyber attacks?
正解:
Explanation:
The primary motivation for many cyber attackers is financial gain. By conducting cyber attacks, attackers may aim to steal sensitive information, such as credit card details or personal data, which they can then use or sell for financial profit.