What is the primary purpose of a defense-in-depth strategy?

To ensure that if one security control fails, additional layers still protect the asset

To focus all security efforts on the network perimeter

To eliminate the need for multiple security tools by using one comprehensive solution

To reduce the number of security controls needed to protect an asset

A company wants to implement passwordless authentication for its employees. The security team is concerned about the risk of device theft. Which passwordless method would best mitigate the risk of device theft?

A biometric fingerprint on the employee's laptop

A one-time passcode sent via SMS to the employee's phone

A hardware security key that requires a PIN to activate

A push notification to the employee's smartphone that they approve

A company's network has a web server that must be accessible from the internet, but the internal database server should only be accessible from the web server. Which network security control should be configured to enforce this restriction?

A VPN that encrypts all traffic between the web server and the database server

A firewall rule that allows inbound traffic to the web server from the internet and allows the web server to initiate connections to the database server

Network segmentation that places the web server and database server on the same subnet

An intrusion detection system (IDS) that monitors traffic to the database server

Certified Cybersecurity Operations Analyst

Domain 5Objective 2

Controls and Techniques CCOA Practice Questions (Page 2)

Part of the Domain 5: Securing Assets domain, which accounts for 11% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

12concepts

11%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of a defense-in-depth strategy?
Select an answer first
7expert · hard
A company wants to implement passwordless authentication for its employees. The security team is concerned about the risk of device theft. Which passwordless method would best mitigate the risk of device theft?
Select an answer first
8foundation · easy
Which of the following is an example of a possession factor in authentication?
Select an answer first
9foundation · easy
Which data protection technique is used to protect data in transit?
Select an answer first
10application · medium
A company's network has a web server that must be accessible from the internet, but the internal database server should only be accessible from the web server. Which network security control should be configured to enforce this restriction?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Controls and Techniques CCOA Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of a defense-in-depth strategy?

A company wants to implement passwordless authentication for its employees. The security team is concerned about the risk of device theft. Which passwordless method would best mitigate the risk of device theft?

Which of the following is an example of a possession factor in authentication?

Which data protection technique is used to protect data in transit?

A company's network has a web server that must be accessible from the internet, but the internal database server should only be accessible from the web server. Which network security control should be configured to enforce this restriction?

Keep studying — Domain 5: Securing Assets