An attacker exploits a misconfigured web server that allows directory listing, exposing sensitive files. What type of vulnerability is being exploited?

Certified Cybersecurity Operations Analyst

Domain 3Objective 1

Attack Vectors CCOA Practice Questions (Page 8)

Part of the Domain 3: Adversarial Tactics, Techniques, and Procedures domain, which accounts for 10% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

10%of the exam

Questions 36–36

36foundation · easy
An attacker exploits a misconfigured web server that allows directory listing, exposing sensitive files. What type of vulnerability is being exploited?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Attack Vectors CCOA Practice Questions (Page 8)

Questions 36–36

An attacker exploits a misconfigured web server that allows directory listing, exposing sensitive files. What type of vulnerability is being exploited?

Keep studying — Domain 3: Adversarial Tactics, Techniques, and Procedures