Free Cisco 100-160 Exam Dumps September 2026

The CCST Cybersecurity Study Guide notes that HIPAA (Health Insurance Portability and Accountability Act) requires that ePHI be protected both in storage and when devices are decommissioned or repurposed. This includes implementing data removal policies for mobile devices.

'HIPAA requires procedures for the removal of electronic protected health information (ePHI) from devices before disposal, reuse, or reassignment.'

(CCST Cybersecurity, Essential Security Principles, Regulatory Compliance section, Cisco Networking Academy)

The CCST Cybersecurity Study Guide explains that disabling SSID broadcast hides the network from casual scanning, adding a layer of obscurity. While not a complete security measure, when combined with WPA2/WPA3 encryption and strong passwords, it can help protect private wireless networks, especially in environments with separate employee and guest access.

'Disabling SSID broadcast can reduce the visibility of a wireless network, making it less likely to be detected by casual attackers. This should be combined with strong encryption and authentication.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security section, Cisco Networking Academy)

A (IP filtering) provides limited protection and is harder to manage for employee devices.

B is correct: Disabling SSID broadcast adds an extra layer of obscurity for the employee network.

C would make the network easier to access from outside the premises, which is less secure.

D would cause network conflicts and make segmentation impossible.

The CCST Cybersecurity Study Guide states that after confirming a vulnerability is relevant and critical, the next step is to apply available patches or mitigations as soon as possible to reduce the attack surface.

'When a critical vulnerability is identified, remediation steps such as applying patches or configuration changes should be implemented immediately to prevent exploitation.'

(CCST Cybersecurity, Vulnerability Assessment and Risk Management, Vulnerability Remediation section, Cisco Networking Academy)

The CCST Cybersecurity Study Guide highlights FileVault as the macOS full-disk encryption tool.

'FileVault is macOS's built-in full-disk encryption feature. It encrypts the contents of the entire startup disk to help prevent unauthorized access to the information stored on the drive, even if the device is lost or stolen.'

(CCST Cybersecurity, Endpoint Security Concepts, Disk Encryption section, Cisco Networking Academy)

A is correct: FileVault provides complete volume encryption.

B (Gatekeeper) controls app installation by verifying code signatures.

C (System Integrity Protection) protects system files from modification.

D (XProtect) is macOS's built-in malware detection system.

The CCST Cybersecurity course defines a strong password as one that:

Is at least 8--12 characters long

Uses a mix of uppercase, lowercase, numbers, and symbols

Avoids dictionary words, personal information, and predictable patterns

'Strong passwords combine length, complexity, and unpredictability, making them resistant to brute force and dictionary attacks.'

(CCST Cybersecurity, Essential Security Principles, Authentication and Access Control section, Cisco Networking Academy)

A is correct: It's long, mixed case, includes numbers and symbols, and is not easily guessable.

B is incorrect: It's based on a date, which is predictable.

C is incorrect: Short and based on a dictionary word.

D is correct: Uses complexity and length with leetspeak for added unpredictability.

The CCST Cybersecurity course explains that MAC address filtering is a network access control method that allows only approved device hardware addresses to connect. While not foolproof against spoofing, it can block a specific device from reconnecting to a small home network.

'MAC address filtering restricts network access to devices whose unique hardware addresses are explicitly allowed. This can be used to block known unauthorized devices from reconnecting.'

(CCST Cybersecurity, Basic Network Security Concepts, Wireless Security Controls section, Cisco Networking Academy)

A is incorrect: IP ACLs are better for controlling traffic types, not blocking specific devices at the router level.

B is correct: It prevents the device's hardware address from reconnecting.

C is temporary since the host can get a new IP via DHCP.

D may hide the network but will not stop a determined attacker who can still detect it.