Isaca ISACA-CCOA Online Practice Questions and Exam Preparation

Isaca ISACA-CCOA Online Questions & Answers

• Question 81:

  Which of the following has been established when a business continuity manager explains that a critical system can be unavailable up to 4 hours before operation is significantly impaired?

  A. Maximum tolerable downtime (MID)
  B. Service level agreement (SLA)
  C. Recovery point objective (RPO)
  D. Recovery time objective (RTO)
  D. Recovery time objective (RTO)

• Question 82:

  An organization's hosted database environment is encrypted by the vendor at rest and in transit. The database was accessed, and critical data was stolen. Which of the following is the MOST likely cause?

  A. Use of group rights for access
  B. Improper backup procedures
  C. Misconfigured access control list (ACL)
  D. Insufficiently strong encryption
  C. Misconfigured access control list (ACL)

• Question 83:

  Which of the following is a PRIMARY risk that can be introduced through the use of a site-to-site virtual private network (VPN) with a service provider?

  A. Loss of data integrity
  B. Gaps in visibility to user behavior
  C. Data exfiltration
  D. Denial of service (DoS) attacks
  B. Gaps in visibility to user behavior

• Question 84:

  A cybersecurity analyst has been asked to review firewall configurations andrecommend which ports to deny in order to prevent users from making outbound non-encrypted connections to the Internet. The organization is concerned that traffic through this type of port is insecure and may be used asanattack vector. Which port should the analyst recommend be denied?

  A. Port 3389
  B. Port 25
  C. Port 443
  D. Port 80
  D. Port 80

• Question 85:

  Which of the following is the MOST effective way to prevent man-in-the-middle attacks?

  A. Changing passwords regularly
  B. Implementing firewalls on the network
  C. Implementing end-to-end encryption
  D. Enabling two-factor authentication
  C. Implementing end-to-end encryption

• Question 86:

  An attacker has exploited an e-commerce website by injecting arbitrary syntax that was passed to and executed by the underlying operating system. Which of the following tactics did the attacker MOST likely use?

  A. Command injection
  B. Injection
  C. Lightweight Directory Access Protocol (LDAP) Injection
  D. Insecure direct object reference
  A. Command injection

• Question 87:

  Which of the following BEST describes JSON web tokens?

  A. They can be used to store user Information and session data.
  B. They can only be used to authenticate users in web applications.
  C. They are signed using a public key and verified using a private key.
  D. They are only used with symmetric encryption.
  A. They can be used to store user Information and session data.

• Question 88:

  SIMULATION

  An employee has been terminated for policy violations.Security logs from win-webserver01 have been collectedand located in the Investigations folder on theDesktop as win- webserver01_logs.zip.

  Create a new case in Security Onion from the win-webserver01_logs.zip file. The case title is WindowsWebserver Logs - CCOA New Case and TLP must beset to Green. No additional fields are required.

  A. See the solution in Explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution in Explanation.

  ---

  Explanation

  Open the Investigations folder on the Desktop and verify that the file win-webserver01_logs.zip is present.

  Log in to the Security Onion SOC web interface at https://10.10.55.2 using the provided Cyber Analyst credentials.

  From the SOC interface, go to the Cases section.

  Select the option to create a new case.

  Set the case title to Windows Webserver Logs - CCOA New Case.

  Set the TLP to Green.

  Leave all other fields empty.

  Attach the win-webserver01_logs.zip file from the Investigations folder to the case.

  Save the case and confirm it appears in the case list with the correct title, TLP set to Green, and the attachment present.

• Question 89:

  Which of the following is the PRIMARY benefit of using software-defined networking for network security?

  A. It simplifies network topology and reduces complexity.
  B. It provides greater scalability and flexibility for network devices.
  C. It allows for centralized security management and control.
  D. It Improves security monitoring and alerting capabilities.
  C. It allows for centralized security management and control.

• Question 90:

  Which layer ofthe TCP/IP stack promotes the reliable transmission of data?

  A. Link
  B. Internet
  C. Application
  D. Transport
  D. Transport