Question 1

An organization has received complaints from a number of its customers that their data has been breached. However, after an investigation, the organization cannot detect any indicators of compromise. The breach was MOST likely due to which type of attack?

Options :

A : Supply chain attack

B : Zero-day attack

C :

injection attack

D : Man-in the-middle attack

Answer: A

Question 2

Which of the following is the PRIMARY reason for tracking the effectiveness of vulnerability remediation processes within an organization?

Options :

A :

To provide reports to senior management so that they can justify the expense of vulnerability management tools

B : To identify executives who are responsible for delaying patching and report them to the board

C : To ensure employees responsible for patching vulnerabilities are actually doing their job correctly

D :

To reduce the likelihood of a threat actor successfully exploiting vulnerabilities In the organization's systems

Answer: D

Question 3

Which of the following is a security feature provided by the WS-Security extension in the Simple Object Access Protocol (SOAP)?

Options :

A : Transport Layer Security (TLS)

B : Message confidentiality

C : MaIware protection

D : Session management

Answer: B

Question 4

Which of the following can be used to identity malicious activity through a take user identity?

Options :

A : Honeypot

B : Honey account

C : Indicator of compromise (IoC)

D : Multi-factor authentication (MFA)

Answer: B

Question 5

During a post-mortem incident review meeting, it is noted that a malicious attacker attempted to achieve network persistence by using vulnerabilities that appeared to be lower risk but ultimately allowed the attacker to escalate their privileges. Which ofthe following did the attacker MOST likely apply?

Options :

A : Exploit chaining

B : Brute force attack

C : Cross-site scripting

D : Deployment of rogue wireless access points

Answer: A

Free CCOA Mock Exam – Practice Online Confidently

Buying Options: