Chapter 1 of 5 · Cisco CCST 100-160 Cybersecurity
Essential Security Principles
Core terms, common threats, access management and encryption, with page links.
- 5topics
- 23 minfast track
- 2diagrams and exhibits
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Security Principles, CIA and Defence in DepthLearn the core security terms, the CIA triad, hardening, defence in depth, types of attackers, their motives and the code of…Diagram5 min
- 2Malware, Denial of Service, Botnets and Network ThreatsLearn the main malware types, ransomware, denial of service, botnets, man in the middle attacks and IoT weaknesses, and how each…Diagram5 min
- 3Social Engineering, Physical Attacks, Insiders and APTsLearn phishing, spear phishing, vishing, smishing, tailgating, physical attacks, insider threats and advanced persistent threats…4 min
- 4Access Management, AAA, RADIUS, MFA and PasswordsLearn authentication, authorization and accounting, how RADIUS centralises access, multifactor authentication factors and a good…4 min
- 5Encryption, Hashing, Certificates and PKILearn symmetric and asymmetric encryption, hashing, digital certificates, PKI, strong and weak algorithms, data states and…5 min
About this chapter
What this chapter covers
This chapter gives you the language and the big ideas of cybersecurity.
It starts with what security is trying to protect and who attacks. It then looks at the threats you will meet, how access is controlled, and how data is kept private and trustworthy with encryption.
Every later chapter uses these ideas, so it is worth getting them solid first. The CCST Cybersecurity exam is aimed at beginners, so the pages define each term in plain language.
How the topics fit together
The topics follow a simple story: what you protect, what attacks it, who may get in, and how data is shielded.
Here is how the pieces connect:
- Principles define vulnerabilities, threats, risk and the CIA triad, and explain hardening and layered defence.
- Threats show how attackers actually cause harm, through software, floods, trickery or abuse of trust.
- Access management limits who can reach systems and records what they do.
- Encryption protects the confidentiality and integrity of data that others might still reach.
Each control in this chapter protects at least one of confidentiality, integrity and availability. Asking which one is a good habit for every exam question.
How to use these pages
Each topic page has the same five sections, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and tables.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions with short answers to test your understanding.
Read the pages in order the first time, because later pages assume earlier terms. When you revise, use the exam facts and the check questions. Try to answer each question aloud before you read the answer.
A good habit is to build your own short glossary as you go. Words such as exploit, hash and factor are easy to mix up under time pressure.
Ready for more practice?
The full Cisco CCST 100-160 Cybersecurity question bank has 864 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Cisco. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.