What is the primary function of a firewall?

To provide remote access to a network

To filter traffic based on predefined rules

To detect and alert on suspicious network traffic

What is the primary purpose of application whitelisting?

To monitor user activity on applications

To block all applications except those known to be malicious

To automatically update applications to the latest version

To allow only approved applications to run on a system

A government agency stores classified documents. The security policy states that access to each document is determined by the document's classification label and the employee's security clearance, and employees cannot override these rules. Which access control model does this policy describe?

Discretionary access control (DAC)

Role-based access control (RBAC)

Attribute-based access control (ABAC)

What is the purpose of environmental monitoring in physical security?

To detect and alert on conditions like fire, temperature, and humidity

To monitor network traffic for intrusions

Certified Cybersecurity Operations Analyst

Domain 5Objective 2

Controls and Techniques CCOA Practice Questions (Page 6)

Part of the Domain 5: Securing Assets domain, which accounts for 11% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

12concepts

11%of the exam

Questions 26–30

26foundation · easy
What is the primary function of a firewall?
Select an answer first
27foundation · easy
What is the primary purpose of application whitelisting?
Select an answer first
28application · medium
A government agency stores classified documents. The security policy states that access to each document is determined by the document's classification label and the employee's security clearance, and employees cannot override these rules. Which access control model does this policy describe?
Select an answer first
29foundation · easy
What is the purpose of environmental monitoring in physical security?
Select an answer first
30foundation · easy
Which incident response phase involves removing the cause of the incident from affected systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.