How does a Distributed Denial of Service (DDoS) attack differ from a standard DoS attack?

A DDoS attack exploits software vulnerabilities, while a DoS attack uses social engineering.

A DDoS attack is always more damaging than a DoS attack.

A DDoS attack targets confidentiality, while a DoS attack targets integrity.

A DDoS attack uses multiple compromised systems to generate traffic, while a DoS attack typically uses a single source.

Which security properties are most directly compromised by a successful Man-in-the-Middle (MitM) attack?

Availability and confidentiality

Authentication and non-repudiation

Certified Cybersecurity Operations Analyst

Domain 3Objective 4

Attack Types CCOA Practice Questions (Page 2)

Part of the Domain 3: Adversarial Tactics, Techniques, and Procedures domain, which accounts for 10% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

9concepts

10%of the exam

Questions 6–10

6foundation · easy
Which type of malware is characterized by self-replication and requires a host program or file to attach to in order to spread?
Select an answer first
7foundation · easy
How does a Distributed Denial of Service (DDoS) attack differ from a standard DoS attack?
Select an answer first
8foundation · easy
Which password attack involves trying every possible combination of characters until the correct password is found?
Select an answer first
9foundation · easy
An attacker uses a list of usernames and passwords obtained from a previous data breach to attempt to log in to a different website. Which attack is this?
Select an answer first
10foundation · easy
Which security properties are most directly compromised by a successful Man-in-the-Middle (MitM) attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Attack Types CCOA Practice Questions (Page 2)

Questions 6–10

Which type of malware is characterized by self-replication and requires a host program or file to attach to in order to spread?

How does a Distributed Denial of Service (DDoS) attack differ from a standard DoS attack?

Which password attack involves trying every possible combination of characters until the correct password is found?

An attacker uses a list of usernames and passwords obtained from a previous data breach to attempt to log in to a different website. Which attack is this?

Which security properties are most directly compromised by a successful Man-in-the-Middle (MitM) attack?

Keep studying — Domain 3: Adversarial Tactics, Techniques, and Procedures