Isaca ISACA-CCOA Online Practice Questions and Exam Preparation

Isaca ISACA-CCOA Online Questions & Answers

• Question 61:

  Which of the following Isa PRIMARY purpose of middleware?

  A. Enabling communication between different applications
  B. Providing security to applications
  C. Storing data for applications
  D. Creating user interfaces for applications
  A. Enabling communication between different applications

• Question 62:

  Which of the following is the PRIMARY risk associated with cybercriminals eavesdropping on unencrypted network traffic?

  A. Data notification
  B. Data exfiltration
  C. Data exposure
  D. Data deletion
  C. Data exposure

• Question 63:

  Which of the following risks is MOST relevant to cloud auto-scaling?

  A. Loss of confidentiality
  B. Loss of integrity
  C. Data breaches
  D. Unforeseen expenses
  D. Unforeseen expenses

• Question 64:

  Which of the following cyber crime tactics involves targets being contacted via text message by an attacker posing as a legitimate entity?

  A. Hacking
  B. Vishing
  C. Smishing
  D. Cyberstalking
  C. Smishing

• Question 65:

  When reviewing encryption applied to data within an organization's databases, a cybersecurity analyst notices that some databases use the encryption algorithms SHA-1 or 3-DES while others use AES-256. Which algorithm should the analyst recommend be used?

  A. AES-256
  B. TLS 1.1
  C. SHA-1
  D. DES
  A. AES-256

• Question 66:

  Which of the following network topologies is MOST resilient to network failures and can prevent a single point of failure?

  A. Mesh
  B. Star
  C. Bus
  D. Ring
  A. Mesh

• Question 67:

  As part of a penetration testing program, which team facilitates education and training of architects and developers to encourage better security and awareness?

  A. Orange team
  B. Red team
  C. Green team
  D. Yellow team
  A. Orange team

• Question 68:

  SIMULATION The user of the Accounting workstation reported thattheir calculator repeatedly opens without their input. Perform a query of startup items for the agent.nameaccounting-pc in the SIEM for the last 24 hours. Identifythe file name that triggered RuleName SuspiciousPowerShell. Enter your response below. Your responsemust include the file

  extension.

  A. See the solution in Explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution in Explanation.

  ---

  Explanation

  Open the SIEM (Security Onion SOC/Kibana) Discover app and select the indices that hold endpoint logs (for example so-* or logs-*).

  Set an absolute time range of “Last 24 hours” (not relative): start = now minus 24 hours, end = now; confirm the timezone is your SOC standard (often UTC).

  Filter to the specific host by adding this query:

  agent.name:"accounting-pc"

  Query startup items to list persistence entries for that host. In the search bar, add filters that match your environment’s osquery mapping, for example any of the following until you see hits:

  event.dataset:"osquery.result" AND (osquery.table:"startup_items" OR name:"startup_items" OR osquery.result.name:"startup_items")

  In the sidebar, add columns that reveal the executable or script path (common fields include osquery.columns.path, osquery.columns.name, osquery.columns.arguments, or simply path and file.name). Note the file names that appear as startup items.

  In a new tab (or by clearing the startup filter), search for the Sysmon detection that names the rule. Use a query such as:

  agent.name:"accounting-pc" AND event.module:"sysmon" AND RuleName:"Suspicious PowerShell"

  (If needed, also add winlog.event_id:1 to focus on process creation events.)

  Open the matching event(s) and read the process fields to find the exact file that triggered the rule. Typical fields to check are process.command_line, process.executable, process.name, Image, and CommandLine. Extract the last segment of

  the path as the file name, keeping the original extension (for example, updater.ps1, launch.vbs, run.bat, task.lnk).

  Cross-check that this same file also appears in the startup items results for the host within the 24-hour window (you should see it listed in the osquery startup_items output).

  Copy the file name exactly as it appears (including the extension) and submit it as the answer.

• Question 69:

  SOAP and REST are Iwo different approaches related to:

  A. machine learning (ML) design.
  B. cloud-based anomaly detection.
  C. SG/6G networks.
  D. application programming Interface (API) design.
  D. application programming Interface (API) design.

• Question 70:

  Which of the following should be completed FIRSTin a data loss prevention (OLP) system implementation project?

  A. Deployment scheduling
  B. Data analysis
  C. Data Inventory
  D. Resource allocation
  C. Data Inventory