Online Access Free CCOA Practice Test

Which of the following has been defined when a disaster recovery plan (DRP) requires daily backups?

• A.Maximum tolerable downtime (MTD)
• B.Mean time to failure (MTTF)
• C.Recovery time objective (RTO|
• D.Recovery point objective {RPO)

A small organization has identified a potential risk associated with its outdated backup system and has decided to implement a new cloud-based real-time backup system to reduce the likelihood of data loss. Which of the following risk responses has the organization chosen?

• A.Risk avoidance
• B.Risk mitigation
• C.Risk acceptance
• D.Risk transfer

During a post-mortem incident review meeting, it is noted that a malicious attacker attempted to achieve network persistence by using vulnerabilities that appeared to be lower risk but ultimately allowed the attacker to escalate their privileges. Which ofthe following did the attacker MOST likely apply?

• A.Exploit chaining
• B.Deployment of rogue wireless access points
• C.Brute force attack
• D.Cross-site scripting

Which of the following is theMOSTimportant component oftheasset decommissioning process from a data risk perspective?

• A.Informing the data owner when decommissioning is complete
• B.Removing the monitoring of the assets
• C.Destruction of data on the assets
• D.Updating the asset status in the configuration management database (CMD8)

Which of the following should be the ULTIMATE outcome of adopting enterprise governance of information and technology in cybersecurity?

• A.Business resilience
• B.Resource optimization
• C.Value creation
• D.Risk optimization