Online Access Free CCOA Practice Test

An attacker has exploited an e-commerce website by injecting arbitrary syntax that was passed to and executed by the underlying operating system. Which of the following tactics did the attacker MOST likely use?

• A.Insecure direct object reference
• B.Injection
• C.Command injection
• D.Lightweight Directory Access Protocol (LDAP) Injection

Which of the following controls would BEST prevent an attacker from accessing sensitive data from files or disk images that have been obtained either physically or via the network?

• A.Next generation antivirus
• B.Encryption of data at rest
• C.Endpoint detection and response (EOR)
• D.Data loss prevention (DLP)

Which of the following is foundational for implementing a Zero Trust model?

• A.Identity and access management (IAM) controls
• B.Robust network monitoring
• C.Routine vulnerability and penetration testing
• D.Comprehensive process documentation

As part of a penetration testing program, which team facilitates education and training of architects and developers to encourage better security and awareness?

• A.Yellow team
• B.Orange team
• C.Red team
• D.Green team

Which of the following Is a PRIMARY function of a network intrusion detection system (IDS)?

• A.Dropping network traffic if suspicious packets are detected
• B.Preventing suspicious packets from being executed
• C.Filtering incoming and outgoing network traffic based on security policies
• D.Analyzing whether packets are suspicious