CIW Cyber Specialist (CPCS-100) Certification Sample Questions
The purpose of this Sample Question Set is to provide you with information about the CIW Cyber Specialist exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the CPCS-100 certification test. To get familiar with real exam environment, we suggest you try our Sample CIW Cyber Specialist Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual CIW Cyber Specialist certification exam.
These sample questions are simple and basic questions that represent likeness to the real CIW CPCS-100 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium CIW Cyber Specialist Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.
CIW CPCS-100 Sample Questions:
01. Customers of a small online pet supply store report fraudulent charges shortly after making purchases. An investigation finds that a script added to the store's checkout page sends each customer's card details to an unknown server. The store's DNS records and email accounts were not altered.
Which type of attack does this describe?
a) Pharming through DNS poisoning
b) Invoice fraud against suppliers
c) Online card skimming
d) Distributed denial-of-service attack
02. Which actions help a user check whether a link in an email leads to a legitimate website before clicking it?
(Choose two.)
a) Confirm the domain exactly matches the company's real site
b) Check that the email shows the company's official logo
c) Confirm the message arrived during normal business hours
d) Hover over the link to preview its real web address
03. A warehouse installs 200 wireless inventory sensors. The vendor ships every sensor with the same factory password, and all the sensors join the network using that one shared credential.
Which change best strengthens device authentication for these sensors?
a) Move the sensors onto a separate network segment from office PCs
b) Give each sensor a unique credential or certificate before it can join
c) Hide the wireless network name so that outside devices are unable to see it
d) Change the shared password once, so that all sensors use a new common one
04. Why do many cybersecurity certifications expire unless the holder renews them?
a) Threats and tools change, so renewal shows the holder's knowledge is still current
b) Expiry lets the certifying body raise the passing score for existing holders
c) The credential belongs to the employer and ends when the holder changes jobs
d) Renewal is the legal license that permits the holder to work in security jobs
05. A security analyst at a credit union must ask the executive team to approve funding for a fix to a serious vulnerability. None of the executives has a technical background.
Which two approaches will communicate the risk most effectively?
(Choose two.)
a) Use precise technical acronyms and metrics to show the analysis is thorough
b) Describe the possible impact in business terms such as downtime and cost
c) Recommend a clear course of action and outline the tradeoffs
d) Walk through the raw scan output so leaders see every detail
06. Two days before leaving to join a competitor, a sales representative at an insurance agency copies the agency's full client list to a personal cloud storage account. No outside attacker was involved.
Which business risk does this situation illustrate?
a) Business email compromise
b) Insider data theft
c) Ransomware attack
d) Credential stuffing attack
07. A security professional plans to start a business helping dental offices assess their risks and write security policies. Each engagement would be a defined project, and she does not plan to watch clients' networks around the clock.
Which business model fits her plan best?
a) Managed security service provider (MSSP)
b) Forensic investigation services
c) Cybersecurity consulting services
d) Security product development
08. During a ransomware incident at a manufacturing company, the response team has split up containment tasks. A junior analyst working through log files notices that a server nobody has mentioned is showing the same encryption activity.
What should the analyst do first?
a) Save the finding, then add it to her written report at shift end
b) Shut down the entire network on her own to stop the spread
c) Wipe the server alone to avoid distracting others
d) Report the new finding to the incident lead immediately
09. A hospital runs dozens of virtual servers on three physical hosts. Its IT team patches each guest operating system monthly but has not updated the hypervisor software in over a year.
Why is this a significant risk?
a) Hypervisor updates are the component that encrypts the data stored inside each guest machine
b) A hypervisor flaw can expose all guests on a host despite their patches
c) Guest operating systems stop receiving their monthly patches once the hypervisor itself is outdated
d) An outdated hypervisor keeps creating unmanaged guest machines, which leads directly to VM sprawl
10. Two virtual machines on the same physical host exchange traffic through the host's virtual switch. The company watches its network with an intrusion detection sensor attached to the physical network.
Why might that sensor miss an attack between the two virtual machines?
a) The traffic stays inside the host and never crosses the physical network
b) Intrusion detection sensors cannot analyze traffic from virtual machines
c) The hypervisor blocks all traffic between guests on the same host
d) Virtual machines encrypt all traffic between them by default
Answers:
|
Question: 01 Answer: c |
Question: 02 Answer: a, d |
Question: 03 Answer: b |
Question: 04 Answer: a |
Question: 05 Answer: b, c |
|
Question: 06 Answer: b |
Question: 07 Answer: c |
Question: 08 Answer: d |
Question: 09 Answer: b |
Question: 10 Answer: a |
Note: For any error in CIW Cyber Specialist (CPCS-100) certification exam sample questions, please update us by writing an email on feedback@edusum.com.
