Which mitigation technique prevents code from executing in memory regions that are marked as non-executable, such as the stack?

ASLR (Address Space Layout Randomization)

DEP (Data Execution Prevention)

A security analyst is investigating a series of crashes in a legacy application. The analyst suspects a buffer overflow vulnerability. The application is running on a system with ASLR and DEP enabled. The analyst notes that the application is compiled without ASLR support (no /DYNAMICBASE flag). Which statement best describes the effectiveness of the mitigations against a buffer overflow exploit?

DEP will prevent the exploit because it stops code execution from the stack, regardless of ASLR.

Both ASLR and DEP will be fully effective because they are enabled at the OS level and apply to all applications.

ASLR will be effective because it randomizes the application's memory addresses, making exploitation difficult.

ASLR will not randomize the application's base address, but DEP will still prevent classic shellcode execution, though the exploit may use ROP to bypass DEP.

A security analyst is reviewing a report of a compromised server. The report indicates that the attacker exploited a vulnerability in a network service that was exposed to the internet. The attacker did not require any user interaction. Which exploit category and delivery method best describe this attack?

Local exploit; drive-by download.

Remote exploit; direct network exploitation.

Certified Cybersecurity Operations Analyst

Domain 3Objective 6

Exploit Techniques CCOA Practice Questions (Page 6)

Part of the Domain 3: Adversarial Tactics, Techniques, and Procedures domain, which accounts for 10% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

6concepts

10%of the exam

Questions 26–30

26foundation · easy
Which mitigation technique prevents code from executing in memory regions that are marked as non-executable, such as the stack?
Select an answer first
27expert · hard
A security analyst is investigating a series of crashes in a legacy application. The analyst suspects a buffer overflow vulnerability. The application is running on a system with ASLR and DEP enabled. The analyst notes that the application is compiled without ASLR support (no /DYNAMICBASE flag). Which statement best describes the effectiveness of the mitigations against a buffer overflow exploit?
Select an answer first
28foundation · easy
Which exploit execution technique involves sending more data to a buffer than it can hold, potentially overwriting adjacent memory?
Select an answer first
29application · medium
A security analyst is reviewing a report of a compromised server. The report indicates that the attacker exploited a vulnerability in a network service that was exposed to the internet. The attacker did not require any user interaction. Which exploit category and delivery method best describe this attack?
Select an answer first
30foundation · easy
Which exploit delivery method involves an attacker sending a malicious link in an email, hoping the recipient clicks it?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Exploit Techniques CCOA Practice Questions (Page 6)

Questions 26–30

Which mitigation technique prevents code from executing in memory regions that are marked as non-executable, such as the stack?

Which exploit execution technique involves sending more data to a buffer than it can hold, potentially overwriting adjacent memory?

Which exploit delivery method involves an attacker sending a malicious link in an email, hoping the recipient clicks it?

Keep studying — Domain 3: Adversarial Tactics, Techniques, and Procedures