Validexamtopics gives you Cisco 100-150 exam questions built directly from the real 100-150 exam question bank, updated July 2026.
Every Cisco 100-150 question comes with a clear explanation, not just an answer key, so you build real understanding instead of memorizing letters. Get it as a downloadable Cisco 100-150 PDF or a timed, interactive Certified Support Technician (CCST) Networking practice exam.
An attacker sends an email impersonating the IT department asking a user to reset their password via a fake link. Which type of attack is this?
Spear phishing is a targeted email-based social-engineering attack where the attacker impersonates a trusted source to trick the victim into revealing credentials or installing malware. SQL injection targets databases, DNS amplification is a reflection DDoS, and MITM intercepts traffic between two parties.
Which symmetric encryption algorithm is currently recommended by NIST for protecting sensitive government data?
AES-256 is the recommended symmetric encryption algorithm for protecting sensitive data. DES is deprecated (56-bit key), RC4 is broken, and MD5 is a hashing algorithm, not encryption.
What is the primary purpose of a network firewall's default-deny rule at the end of an access control list?
A default-deny (implicit deny) rule at the end of an ACL ensures that any traffic not explicitly allowed by prior rules is dropped. This is a foundational principle of least-privilege network security.
Which authentication factor is represented by a hardware token that generates a one-time password every 30 seconds?
A hardware token is 'something you have' - a possession factor. 'Something you know' is a password/PIN, 'something you are' is a biometric, and 'somewhere you are' is a location factor.
During incident response, which phase follows 'Containment' in the standard SANS/NIST lifecycle?
The SANS/NIST incident response lifecycle is: Preparation → Identification → Containment → Eradication → Recovery → Lessons Learned. Eradication removes the threat (e.g., malware, backdoors) after the incident has been contained.
