The CCST Cybersecurity course identifies Windows PowerShell as both a command-line interface (CLI) and a robust scripting environment. It is used by system administrators for automation, configuration, and task scheduling.

"PowerShell is a Windows command-line shell and scripting language built on the .NET framework. It allows administrators to automate administrative tasks, manage system configurations, and execute complex scripts for system management."

(CCST Cybersecurity, Endpoint Security Concepts , System Administration Tools section, Cisco Networking Academy)

A is correct: PowerShell provides both interactive command execution and scripting capabilities.

B (MMC) is a GUI-based management console, not a CLI.

C (Vim) is a text editor, not a Windows-native CLI.

D (MS-DOS) is a legacy command shell with no advanced scripting features comparable to PowerShell.

The CCST Cybersecurity course states that an Intrusion Detection System (IDS) passively monitors network or system traffic and analyzes it against a database of known threat signatures or behavioral patterns.

"IDS devices inspect network traffic, compare it to known malicious signatures or anomalies, and generate alerts for suspicious activity without actively blocking traffic."

(CCST Cybersecurity, Basic Network Security Concepts , IDS and IPS section, Cisco Networking Academy)

A is correct: IDS is passive and signature-based.

B (IPS) is active and can block traffic.

C (Proxy Server) handles requests between clients and servers.

D (Honeypot) is a decoy system to attract attackers.

The CCST Cybersecurity Study Guide outlines worm mitigation as a four-step process:

Containment –

"Limit the spread of the worm by segmenting the network and restricting traffic from infected areas."

Inoculation –

"Apply patches or updates to uninfected systems to prevent them from being compromised."

Quarantine –

"Remove or block infected systems from the network to stop further infection."

Treatment –

"Clean and patch infected systems to remove the worm and fix vulnerabilities."

(CCST Cybersecurity, Incident Handling , Malware Mitigation Strategies section, Cisco Networking Academy)

The CCST Cybersecurity Study Guide specifies that AES (Advanced Encryption Standard) is the encryption method used in modern WiFi security protocols like WPA2 and WPA3.

"WPA2 and WPA3 use the Advanced Encryption Standard (AES) for securing wireless traffic. AES provides strong symmetric encryption, replacing outdated methods like WEP and TKIP."

(CCST Cybersecurity, Basic Network Security Concepts , Wireless Security section, Cisco Networking Academy)

A (DES) is outdated and insecure.

B (Triple DES) is older and slower, rarely used in WiFi.

C is correct: AES is the industry standard for WiFi security.

D (RSA) is asymmetric encryption used in key exchange, not bulk WiFi encryption.

The CCST Cybersecurity Study Guide specifies that both Wireshark and tcpdump are packet capture tools that can record network traffic to a file for later analysis.

"Wireshark provides a graphical interface for packet capture and analysis. Tcpdump is a command-line tool that captures packets for detailed offline review."

(CCST Cybersecurity, Incident Handling , Network Traffic Analysis section, Cisco Networking Academy)

A is correct: Wireshark is widely used for packet capture and analysis.

B is correct: tcpdump is a CLI-based packet capture tool.

C (Nmap) is for network scanning, not packet capture.

D (netstat) displays network connections and ports but does not capture packets.