Which of the following MOST directly supports the cybersecurity objective of integrity?
Answer(s): B
The cybersecurity objective of integrity ensures that data is accurate, complete, and unaltered. The most direct method to support integrity is the use of digital signatures because:Tamper Detection: A digital signature provides a way to verify that data has not been altered after signing.Authentication and Integrity: Combines cryptographic hashing and public key encryption to validate both the origin and the integrity of data.Non-Repudiation: Ensures that the sender cannot deny having sent the message.Use Case: Digital signatures are commonly used in secure email, software distribution, and document verification.Other options analysis:A . Data backups: Primarily supports availability, not integrity.C . Least privilege: Supports confidentiality by limiting access.D . Encryption: Primarily supports confidentiality by protecting data from unauthorized access.CCOA Official Review Manual, 1st Edition
Chapter 5: Data Integrity Mechanisms: Discusses the role of digital signatures in preserving data integrity.Chapter 8: Cryptographic Techniques: Explains how signatures authenticate data.
Which of the following is the BEST method for hardening an operating system?
Answer(s): C
The best method for hardening an operating system is to remove unnecessary services and applications because:Minimizes Attack Surface: Reduces the number of potential entry points for attackers.Eliminates Vulnerabilities: Unused or outdated services may contain unpatched vulnerabilities.Performance Optimization: Fewer active services mean reduced resource consumption.Best Practice: Follow the principle of minimal functionality to secure operating systems.Security Baseline: After cleanup, the system is easier to manage and monitor.Other options analysis:A . Implementing a HIDS: Helps detect intrusions but does not inherently harden the OS.B . Manually signing drivers: Ensures authenticity but doesn't reduce the attack surface.D . Applying only critical updates: Important but insufficient on its own. All relevant updates should be applied.CCOA Official Review Manual, 1st Edition
Chapter 9: Secure System Configuration: Emphasizes the removal of non-essential components for system hardening.Chapter 7: Endpoint Security Best Practices: Discusses minimizing services to reduce risk.
Which of the following roles is responsible for approving exceptions to and deviations from the incident management team charter on an ongoing basis?
The CISO is typically responsible for approving exceptions and deviations from the incident management team charter because:Strategic Decision-Making: As the senior security executive, the CISO has the authority to approve deviations based on risk assessments and business priorities.Policy Oversight: The CISO ensures that any exceptions align with organizational security policies.Incident Management Governance: As part of risk management, the CISO is involved in high-level decisions impacting incident response.Other options analysis:A . Security steering group: Advises on strategy but does not typically approve operational deviations.B . Cybersecurity analyst: Executes tasks rather than making executive decisions.D . Incident response manager: Manages day-to-day operations but usually does not approve policy deviations.CCOA Official Review Manual, 1st Edition
Chapter 2: Security Governance: Defines the role of the CISO in managing incident-related exceptions.Chapter 8: Incident Management Policies: Discusses decision-making authority within incident response.
Which of the following would BCST enable an organization to prioritize remediation activities when multiple vulnerabilities are identified?
Answer(s): D
A risk assessment enables organizations to prioritize remediation activities when multiple vulnerabilities are identified because:Contextual Risk Evaluation: Assesses the potential impact and likelihood of each vulnerability.Prioritization: Helps determine which vulnerabilities pose the highest risk to critical assets.Resource Allocation: Ensures that remediation efforts focus on the most significant threats.Data-Driven Decisions: Uses quantitative or qualitative metrics to support prioritization.Other options analysis:A . Business Impact Analysis (BIA): Focuses on the impact of business disruptions, not directly on vulnerabilities.B . Vulnerability exception process: Manages known risks but does not prioritize them.C . Executive reporting process: Summarizes security posture but does not prioritize remediation.CCOA Official Review Manual, 1st Edition
Chapter 5: Risk Assessment Techniques: Emphasizes the importance of risk analysis in vulnerability management.Chapter 7: Prioritizing Vulnerability Remediation: Guides how to rank threats based on risk.
Which of the following cyber crime tactics involves targets being contacted via text message by an attacker posing as a legitimate entity?
Smishing (SMS phishing) involves sending malicious text messages posing as legitimate entities to trick individuals into disclosing sensitive information or clicking malicious links.Social Engineering via SMS: Attackers often impersonate trusted institutions (like banks) to induce fear or urgency.Tactics: Typically include fake alerts, password reset requests, or promotional offers.Impact: Users may unknowingly provide login credentials, credit card information, or download malware.Example: A message claiming to be from a bank asking users to verify their account by clicking a link.Other options analysis:A . Hacking: General term, does not specifically involve SMS.B . Vishing: Voice phishing via phone calls, not text messages.D . Cyberstalking: Involves persistent harassment rather than deceptive messaging.CCOA Official Review Manual, 1st Edition
Chapter 6: Social Engineering Tactics: Explores phishing variants, including smishing.Chapter 8: Threat Intelligence and Attack Techniques: Details common social engineering attack vectors.
Post your Comments and Discuss ISACA CCOA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CCOA content, but please register or login to continue.