How are threat actors increasingly collaborating in the current threat landscape?

By avoiding any form of communication to stay undetected

By reducing the use of ransomware-as-a-service

By sharing zero-day exploits and attack tools on underground forums

By exclusively targeting government entities

Certified Cybersecurity Operations Analyst

Domain 3Objective 2

Threat Actors / Agents CCOA Practice Questions (Page 4)

Part of the Domain 3: Adversarial Tactics, Techniques, and Procedures domain, which accounts for 10% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

10%of the exam

Questions 16–20

16application · medium
A company's employee, recently terminated, uses their still-active VPN credentials to access the corporate network and delete critical files. The employee had no prior malicious behavior. Which threat actor type does this represent?
Select an answer first
17foundation · medium
How are threat actors increasingly collaborating in the current threat landscape?
Select an answer first
18foundation · medium
A threat actor infiltrates a company's network and exfiltrates customer credit card data. What is the most likely intention of this actor?
Select an answer first
19foundation · medium
An attacker uses a publicly available exploit tool to scan for vulnerable systems and launches a simple denial-of-service attack. This behavior is characteristic of which threat actor's capability level?
Select an answer first
20foundation · medium
A group of attackers defaces a government website and replaces it with a political message. Their primary motivation is most likely:
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Threat Actors / Agents CCOA Practice Questions (Page 4)

Questions 16–20

A company's employee, recently terminated, uses their still-active VPN credentials to access the corporate network and delete critical files. The employee had no prior malicious behavior. Which threat actor type does this represent?

How are threat actors increasingly collaborating in the current threat landscape?

A threat actor infiltrates a company's network and exfiltrates customer credit card data. What is the most likely intention of this actor?

An attacker uses a publicly available exploit tool to scan for vulnerable systems and launches a simple denial-of-service attack. This behavior is characteristic of which threat actor's capability level?

A group of attackers defaces a government website and replaces it with a political message. Their primary motivation is most likely:

Keep studying — Domain 3: Adversarial Tactics, Techniques, and Procedures