Free Isaca CCOA Exam Questions

Become Isaca Certified with updated CCOA exam questions and correct answers

Page: 1 / 29

Total 141 Questions | Updated On: Feb 09, 2026

Add To Cart

Question 1

An organization has received complaints from a number of its customers that their data has been breached. However, after an investigation, the organization cannot detect any indicators of compromise. The breach was MOST likely due to which type of attack?

A : Supply chain attack

B : Zero-day attack

C : injection attack

D : Man-in the-middle attack

Answer: A

Question 2

Which of the following is a security feature provided by the WS-Security extension in the Simple Object Access Protocol (SOAP)?

A : Transport Layer Security (TLS)

B : Message confidentiality

C : MaIware protection

D : Session management

Answer: B

Question 3

Which of the following is theMOSTimportant component oftheasset decommissioning process from a data risk perspective?

A : Informing the data owner when decommissioning is complete

B : Destruction of data on the assets

C : Updating the asset status in the configuration management database (CMD8)

D : Removing the monitoring of the assets

Answer: B

Question 4

In which phase of the Cyber Kill Chain" would a red team run a network and port scan with Nmap?

A : Exploitation

B : Delivery

C : Reconnaissance

D : Weaponization

Answer: C

Question 5