A manufacturing company stores its engineering blueprints in a shared network drive. The security team wants to implement a baseline control that is widely recognized as a fundamental best practice for protecting these files from unauthorized access. Which control should the team prioritize first?

Implement role-based access control (RBAC) on the shared drive

Deploy a data loss prevention (DLP) agent on every workstation

Schedule weekly antivirus scans on the file server

Enable full-disk encryption on all engineering workstations

Which practice is a common industry best practice for securing organizational assets?

Disabling all logging to reduce storage costs and improve performance

Maintaining an up-to-date inventory of hardware and software assets

Granting all users the same level of access to simplify administration

Applying security patches to systems as soon as they are released

Which action aligns with the industry best practice of least privilege?

Granting users only the permissions necessary to perform their job functions

Assigning the same permissions to all members of a department

Providing all employees with administrator rights to perform their jobs

Reviewing user access rights once a year

Certified Cybersecurity Operations Analyst

Domain 5Objective 4

Industry Best Practices, Guidance, Frameworks, and Standards CCOA Practice Questions (Page 6)

Part of the Domain 5: Securing Assets domain, which accounts for 11% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

4concepts

11%of the exam

Questions 26–28

26application · medium
A manufacturing company stores its engineering blueprints in a shared network drive. The security team wants to implement a baseline control that is widely recognized as a fundamental best practice for protecting these files from unauthorized access. Which control should the team prioritize first?
Select an answer first
27foundation · easy
Which practice is a common industry best practice for securing organizational assets?
Select an answer first
28foundation · easy
Which action aligns with the industry best practice of least privilege?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Industry Best Practices, Guidance, Frameworks, and Standards CCOA Practice Questions (Page 6)

Questions 26–28

A manufacturing company stores its engineering blueprints in a shared network drive. The security team wants to implement a baseline control that is widely recognized as a fundamental best practice for protecting these files from unauthorized access. Which control should the team prioritize first?

Which practice is a common industry best practice for securing organizational assets?

Which action aligns with the industry best practice of least privilege?

Keep studying — Domain 5: Securing Assets