CCST Cybersecurity

A denial-of-service attack makes a company's public website unreachable. Which element of the CIA triad is most directly impacted?

Unpatched software with a publicly known flaw that an attacker could use is best described as a:

Access is granted to resources based on a user's assigned job function, such as 'Security Analyst.' Which access control model is this?

A technician verifies a downloaded file's integrity by comparing its computed digest to a published value. Which technique is being used?

Which statement about symmetric versus asymmetric encryption is correct?

A user is given only the permissions required to perform their tasks and nothing more. Which principle is applied?

An attacker phones an employee, pretends to be from the help desk, and pressures them into revealing their password. Which attack category is this?

Which cryptographic mechanism ensures that a signer cannot later deny having signed a document?

A support technician can access sensitive files unrelated to their job. What is the ethical and correct action?

An organization uses a firewall, network IPS, host antivirus, and data encryption together so that one control failing does not cause compromise. Which strategy is this?