What is a lateral movement threat in network security?

An attacker using a compromised host to access other systems within the network.

An attacker intercepting data as it travels between two network devices.

An attacker flooding the network with traffic to cause a denial of service.

An attacker physically accessing a network switch to install a rogue device.

What is a common risk associated with insecure APIs in web applications?

Exposing sensitive data due to broken authentication or excessive permissions.

The API automatically encrypting all data in transit.

The API using standard HTTP methods like GET and POST.

The API being too fast for the application to handle.

Which of the following is an example of an insecure configuration on an endpoint?

Installing the latest security updates.

Requiring strong passwords for user accounts.

Disabling the local firewall on a workstation.

Enabling full disk encryption on a laptop.

Which of the following is a network risk source related to unsecured protocols?

Deploying a firewall to filter inbound traffic.

Using Telnet for remote administration instead of SSH.

Implementing network segmentation to isolate sensitive systems.

Using HTTPS to encrypt web traffic.

Which practice is most effective in managing third-party vendor risk in the supply chain?

Disabling all vendor access after the contract ends.

Using the same password for all vendor accounts.

Conducting regular security assessments of vendors.

Relying solely on the vendor's self-reported security posture.

Certified Cybersecurity Operations Analyst

Domain 2Objective 4

Risk by Domain CCOA Practice Questions (Page 1)

Part of the Domain 2: Cybersecurity Principles and Risk domain, which accounts for 20% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~19–32 in this domain), expect 5–8 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

20%of the exam

Questions 1–5

1foundation · easy
What is a lateral movement threat in network security?
Select an answer first
2foundation · easy
What is a common risk associated with insecure APIs in web applications?
Select an answer first
3foundation · easy
Which of the following is an example of an insecure configuration on an endpoint?
Select an answer first
4foundation · easy
Which of the following is a network risk source related to unsecured protocols?
Select an answer first
5foundation · easy
Which practice is most effective in managing third-party vendor risk in the supply chain?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.