CCOA

Review 108 CCOA practice questions with answer explanations and community insights.

Question 1

A penetration tester has been hired and given access to all code, diagrams, and documentation. Which type of testing is being conducted?

  1. Full knowledge
  2. Partial knowledge
  3. No knowledge
  4. Unlimited scope

Question 2

Which of the following is the MOST effective approach for tracking vulnerabilities in an organization’s systems and applications?

  1. Wait for external security researchers to report vulnerabilities.
  2. Track only those vulnerabilities that have been publicly disclosed.
  3. Implement regular vulnerability scanning and assessments.
  4. Rely on employees to report any vulnerabilities they encounter.

Question 3

A nation-state that is employed to cause financial damage on an organization is BEST categorized as:

  1. a threat actor.
  2. an attack vector.
  3. a risk.
  4. a vulnerability.

Question 4

The PRIMARY function of open source intelligence (OSINT) is:

  1. encoding stolen data prior to exfiltration to subvert data loss prevention (DLP) controls.
  2. initiating active probes for open ports with the aim of retrieving service version information.
  3. leveraging publicly available sources to gather information on an enterprise or on individuals.
  4. delivering remote access malware packaged as an executable file via social engineering tactics.

Question 5

Which of the following has been defined when a disaster recovery plan (DRP) requires daily backups?

  1. Maximum tolerable downtime (MTD)
  2. Recovery time objective (RTO)
  3. Recovery point objective (RPO)
  4. Mean time to failure (MTTF)
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.