What is the primary purpose of an Application Programming Interface (API)?

To encrypt data transmitted between a client and a server

To define a set of rules and protocols that allow different software applications to communicate and exchange data

To store and manage large amounts of structured data for an organization

To provide a user interface for interacting with a software application

A company has a monolithic application that is difficult to deploy frequently. They want to adopt CI/CD to release smaller changes more often. However, the compliance team requires a manual approval step before production deployment. Which approach best balances the need for frequent releases with the compliance requirement?

Automate everything including production deployment to speed up releases

Use a canary deployment to bypass the manual approval

Automate CI and deployment to staging, but require manual approval for production

Keep the current manual process and do not adopt CI/CD

What is the most effective way to prevent SQL injection vulnerabilities in application code?

Using parameterized queries or prepared statements

Using a web application firewall (WAF)

Validating user input with a regular expression

Encoding all user input with URL encoding

A security analyst is integrating a new API that requires an access token. The token expires every hour. The analyst wants to automate the process of obtaining a new token and using it in API requests. Which approach is most appropriate?

Write a script that requests a token, stores it, and includes it in the Authorization header for each request

Embed the token in the URL for each request

Manually copy the token into each request

Use a static API key instead of a token

Which cloud service model provides virtualized computing resources over the internet, such as virtual machines, storage, and networks, while the customer is responsible for managing the operating system and applications?

IaaS (Infrastructure as a Service)

Certified Cybersecurity Operations Analyst

Domain 1Objective 3

Development and Deployment CCOA Practice Questions (Page 4)

Part of the Domain 1: Technology Essentials domain, which accounts for 25% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~24–40 in this domain), expect 8–13 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

11concepts

25%of the exam

Questions 16–20

16foundation · easy
What is the primary purpose of an Application Programming Interface (API)?
Select an answer first
17expert · hard
A company has a monolithic application that is difficult to deploy frequently. They want to adopt CI/CD to release smaller changes more often. However, the compliance team requires a manual approval step before production deployment. Which approach best balances the need for frequent releases with the compliance requirement?
Select an answer first
18foundation · easy
What is the most effective way to prevent SQL injection vulnerabilities in application code?
Select an answer first
19application · medium
A security analyst is integrating a new API that requires an access token. The token expires every hour. The analyst wants to automate the process of obtaining a new token and using it in API requests. Which approach is most appropriate?
Select an answer first
20foundation · easy
Which cloud service model provides virtualized computing resources over the internet, such as virtual machines, storage, and networks, while the customer is responsible for managing the operating system and applications?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.