Isaca CCOA Exam Questions

Question 6 of 108

A cybersecurity analyst has discovered a vulnerability in an organization's web application. Which of the following should be done FIRST to address this vulnerability?

Immediately shut down the web application to prevent exploitation.

Attempt to exploit the vulnerability to determine its severity.

Follow the organization's incident response management procedures.

Restart the web server hosting the web application.

Correct Answer: C

Question 7 of 108

Which ruleset can be applied in the /home/administrator/hids/ruleset/rules directory?

Correct Answer: B

Question 8 of 108

Which of the following is MOST important for maintaining an effective risk management program?

Approved budget

Ongoing review

Automated reporting

Monitoring regulations

Correct Answer: B

Question 9 of 108

Which of the following is the MOST important reason to limit the number of users with local admin privileges on endpoints?

Local admin accounts require more administrative work in order to manage them properly.

Local admin accounts have elevated privileges that can be exploited by threat actors.

Local admin users might make unauthorized changes.

Local admin users might install unapproved software.

Correct Answer: B

Question 10 of 108

Which of the following is a security feature provided by the WS-Security extension in the Simple Object Access Protocol (SOAP)?

Malware protection

Message confidentiality

Transport Layer Security (TLS)

Session management

Correct Answer: B