Which attack type is primarily designed to disrupt the availability of a service by overwhelming it with traffic?

DDoS (Distributed Denial of Service)

An attacker submits the following input to a login form: 'admin' OR '1'='1'. Which type of web attack is this?

Cross-site request forgery (CSRF)

Certified Cybersecurity Operations Analyst

Domain 3Objective 4

Attack Types CCOA Practice Questions (Page 4)

Part of the Domain 3: Adversarial Tactics, Techniques, and Procedures domain, which accounts for 10% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

9concepts

10%of the exam

Questions 16–20

16application · medium
A company's file server is infected with malware that encrypts all files and displays a message demanding payment in cryptocurrency to decrypt them. The malware spread to other servers on the network automatically without user interaction. Which type of malware is this?
Select an answer first
17foundation · easy
An attacker calls an employee, pretending to be from IT support, and asks for their password to 'fix a network issue'. Which social engineering technique is being used?
Select an answer first
18foundation · easy
Which attack type is primarily designed to disrupt the availability of a service by overwhelming it with traffic?
Select an answer first
19foundation · easy
An attacker submits the following input to a login form: 'admin' OR '1'='1'. Which type of web attack is this?
Select an answer first
20foundation · easy
An organization discovers software on a workstation that silently records the user's keystrokes and captures screenshots. Which malware variant best describes this software?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Attack Types CCOA Practice Questions (Page 4)

Questions 16–20

A company's file server is infected with malware that encrypts all files and displays a message demanding payment in cryptocurrency to decrypt them. The malware spread to other servers on the network automatically without user interaction. Which type of malware is this?

An attacker calls an employee, pretending to be from IT support, and asks for their password to 'fix a network issue'. Which social engineering technique is being used?

Which attack type is primarily designed to disrupt the availability of a service by overwhelming it with traffic?

An attacker submits the following input to a login form: 'admin' OR '1'='1'. Which type of web attack is this?

An organization discovers software on a workstation that silently records the user's keystrokes and captures screenshots. Which malware variant best describes this software?

Keep studying — Domain 3: Adversarial Tactics, Techniques, and Procedures