Which of the following is an example of a malicious insider threat?

An employee intentionally exfiltrates customer data to sell to a competitor.

An employee forgets to update antivirus software on their workstation.

An employee accidentally sends a sensitive email to the wrong recipient.

An employee falls for a phishing email and reveals their password.

What is the primary goal of a Denial of Service (DoS) attack?

To steal sensitive data from a database

To alter the content of a website

To gain unauthorized access to a system

To disrupt the availability of a service or resource

An online gaming company is experiencing intermittent outages where players cannot connect to the game servers. The network team observes a massive volume of UDP traffic flooding the servers from thousands of different IP addresses worldwide. The traffic appears to be from compromised IoT devices. Which type of attack is this?

Distributed denial-of-service (DDoS) attack

Certified Cybersecurity Operations Analyst

Domain 3Objective 4

Attack Types CCOA Practice Questions (Page 1)

Part of the Domain 3: Adversarial Tactics, Techniques, and Procedures domain, which accounts for 10% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

9concepts

10%of the exam

Questions 1–5

1foundation · easy
Which web attack involves injecting malicious scripts into a website that then execute in the browsers of other users?
Select an answer first
2foundation · easy
Which of the following is an example of a malicious insider threat?
Select an answer first
3foundation · easy
What is the primary goal of a Denial of Service (DoS) attack?
Select an answer first
4application · medium
An online gaming company is experiencing intermittent outages where players cannot connect to the game servers. The network team observes a massive volume of UDP traffic flooding the servers from thousands of different IP addresses worldwide. The traffic appears to be from compromised IoT devices. Which type of attack is this?
Select an answer first
5application · medium
An organization's security team discovers that a file named 'invoice.pdf.exe' was downloaded by an employee and executed. After execution, the malware created a backdoor and allowed remote access to the system. Which type of malware is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Attack Types CCOA Practice Questions (Page 1)

Questions 1–5

Which web attack involves injecting malicious scripts into a website that then execute in the browsers of other users?

Which of the following is an example of a malicious insider threat?

What is the primary goal of a Denial of Service (DoS) attack?

An organization's security team discovers that a file named 'invoice.pdf.exe' was downloaded by an employee and executed. After execution, the malware created a backdoor and allowed remote access to the system. Which type of malware is this?

Keep studying — Domain 3: Adversarial Tactics, Techniques, and Procedures