最新の100-160試験のリアル試験問題本日無料更新されました [Q117-Q138]

4.5/5 - (2 votes)

最新の100-160試験のリアル試験問題本日無料更新されました

100-160リアル試験問題解答は更新された[2026年02月20日]

Cisco 100-160 認定試験の出題範囲：

トピック	出題範囲
トピック 1	基本的なネットワークセキュリティの概念: 試験のこのセクションでは、ネットワーク防御者のスキルを測定し、ファイアウォール、VPN、侵入検知防止システムなどのネットワークレベルの保護を理解することに重点を置き、ネットワーク環境内で脅威がどのように軽減されるかについての洞察を提供します。
トピック 2	インシデント処理: 試験のこのセクションでは、インシデント対応者のスキルを測定し、セキュリティインシデントの認識、適切な対応、脅威の封じ込めに重点を置き、インシデント対応手順の重要な基礎を形成します。
トピック 3	エンドポイントセキュリティの概念: 試験のこのセクションでは、エンドポイントセキュリティスペシャリストのスキルを測定します。これには、個々のデバイスのセキュリティ保護、エンドポイントレベルでのウイルス対策、パッチ適用、アクセス制御などの保護の理解など、デバイスの整合性を維持するために不可欠な内容が含まれます。
トピック 4	脆弱性評価とリスク管理：この試験セクションでは、リスク管理アナリストのスキルを測定し、脆弱性の特定と評価、リスクの優先順位の理解、組織のシステム内で脅威を積極的に管理するのに役立つ緩和戦略の適用などを行います。
トピック 5	基本的なセキュリティ原則: 試験のこのセクションでは、サイバーセキュリティ技術者のスキルを測定し、CIA トライアド (機密性、整合性、可用性) などの基本的なサイバーセキュリティの概念、基本的な脅威の種類と脆弱性をカバーし、情報システムを保護する方法を理解するための概念的な基礎を築きます。

新問題 117
Which of the following is a limitation of vulnerability databases?

They may not include vulnerabilities discovered by malicious actors.

They require minimal human effort for maintaining and updating.

They provide real-time information on emerging threats.

They cover all known vulnerabilities in every software and hardware.

新問題 118
You need a software solution that performs the following tasks:
Compiles network data
Logs information from many sources
Provides orchestration in the form of case management
Automates incident response workflows
What product should you use?

SIEM

SOAR

NextGen IPS

Snort

新問題 119
What is the main purpose of a disaster recovery plan as compared to a business continuity plan?

Limiting operational downtime.

Keeping the business open in some capacity during a disaster.

Restoring data access and an IT infrastructure as quickly as possible.

Allowing staff to continue to serve customers throughout a disaster.

新問題 120
Which logging mechanism is associated with network devices such as routers, switches, and firewalls?

Syslog

Event Viewer

System and application logs

Audit logs

新問題 121
Which of the following describes the purpose of a VPN (Virtual Private Network)?

To improve network performance and reduce latency

To segment a network into multiple smaller networks

To provide secure remote access to a private network over the internet

To control and filter network traffic based on predefined policies

新問題 122
Which of the following elements are part of cybersecurity incident response?

Prevention, Monitoring, Compliance, Remediation

Assessment, Authorization, Authentication, Accounting

Identification, Recovery, Mitigation, Restoration

Detection, Analysis, Containment, Eradication

新問題 123
What is the purpose of a VPN?

To block unauthorized access

To detect network vulnerabilities

To encrypt network traffic

To authenticate users

新問題 124
Which of the following best describes the concept of automation in cybersecurity testing?

Implementing security controls to prevent attacks

Using software and tools to automatically conduct security tests

Performing physical tests on network infrastructure

Conducting manual security tests

新問題 125
Which of the following best describes a vulnerability in the context of cybersecurity?

A tool used to test the security of a network or system.

A security feature implemented to protect a network or system.

A method used to attack a network or system.

A weakness in a network or system that can be exploited by attackers.

新問題 126
Which step should be performed immediately after identifying a critical vulnerability affecting internet-facing systems?

Document the vulnerability in the annual security report.

Apply the vendor patch or mitigation.

Schedule a quarterly penetration test.

Change the default administrator passwords.

新問題 127
Which of the following is an example of multifactor authentication?

Using a fingerprint scan only

Using a biometric scan and a passcode

Using a username and password only

Using a smart card and a PIN

新問題 128
The company web server collects information through a form. The form is accessed by using port 80. The form content is transferred to an encrypted database for storage. You are investigating a complaint that the form content has been compromised.
What is the cause of the security breach?

The database was compromised.

The data was transferred to the database using a nonsecure protocol.

The website was accessed using HTTP, which is an unencrypted protocol.

The web browser used to access the site was not updated to the latest version.

新問題 129
Which of the following is a best practice for proactively managing and securing communication before, during, and after an event?

Limiting access to essential personnel only

Conducting regular security audits

Regularly updating antivirus software

Encrypting sensitive data at rest and in transit

新問題 130
Which of the following updates is responsible for updating the software embedded within hardware devices?

Application updates

Firmware updates

Windows Update

Device drivers

新問題 131
Which of the following is an example of a network layer (Layer 3) security control?

Encryption

Intrusion Detection System (IDS)

Antivirus software

Firewall

新問題 132
You need to diagram an intrusion event by using the Diamond Model.
Move each event detail from the list on the left to the correct location in the diagram on the right.
Note: You will receive partial credit for each correct response.

新問題 133
Which of the following is a primary goal of monitoring security events “as they occur”?

To detect and respond to security incidents in a timely manner

To enforce security policies and access controls

To ensure zero incidents and vulnerabilities in the network

To meet regulatory compliance requirements

新問題 134
What regulation is specifically designed to ensure the security of payment card data processed by organizations?

GDPR

BYOD

PCI DSS

HIPAA

新問題 135
Which technology focuses on automating security response actions based on predefined playbooks or workflows?

SOAR (Security Orchestration, Automation, and Response)

IDS (Intrusion Detection System)

Firewall

SIEM (Security Information and Event Management)

新問題 136
Which compliance framework is specifically related to protecting the personal data and privacy of European Union (EU) citizens?

HIPAA

GDPR

PCI-DSS

FERPA

新問題 137
What is the primary goal of a threat actor in a cyber attack?

To exploit vulnerabilities in a system

To gain unauthorized access to a network

To cause damage or disruption to a target

To identify and mitigate security risks

新問題 138
You are collecting data after a suspected intrusion on the local LAN.
You need to capture incoming IP packets to a file for an investigator to analyze.
Which two tools should you use? (Choose 2.)

Wireshark

tcpdump

Nmap

netstat