Certified Cybersecurity Operations Analyst

Here you have the best Isaca CCOA practice exam questions

Question 1 of 108

A penetration tester has been hired and given access to all code, diagrams, and documentation. Which type of testing is being conducted?

Full knowledge

Partial knowledge

No knowledge

Unlimited scope

Correct Answer: A

Question 2 of 108

Which of the following is the MOST effective approach for tracking vulnerabilities in an organization’s systems and applications?

Wait for external security researchers to report vulnerabilities.

Track only those vulnerabilities that have been publicly disclosed.

Implement regular vulnerability scanning and assessments.

Rely on employees to report any vulnerabilities they encounter.

Correct Answer: C

Question 3 of 108

A nation-state that is employed to cause financial damage on an organization is BEST categorized as:

a threat actor.

an attack vector.

a risk.

a vulnerability.

Correct Answer: A

Question 4 of 108

The PRIMARY function of open source intelligence (OSINT) is:

encoding stolen data prior to exfiltration to subvert data loss prevention (DLP) controls.

initiating active probes for open ports with the aim of retrieving service version information.

leveraging publicly available sources to gather information on an enterprise or on individuals.

delivering remote access malware packaged as an executable file via social engineering tactics.

Correct Answer: C

Question 5 of 108

Which of the following has been defined when a disaster recovery plan (DRP) requires daily backups?

Maximum tolerable downtime (MTD)

Recovery time objective (RTO)

Recovery point objective (RPO)

Mean time to failure (MTTF)

Correct Answer: C