Free ISACA CCOA Practice Test & Real Exam Questions
A password Is an example of which type of authentication factor?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Target discovery and service enumeration would MOST likely be used by an attacker who has the initial objective of:
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
A nation-state that is employed to cause financial damage on an organization is BEST categorized as:
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which of the following is a PRIMARY risk that can be introduced through the use of a site-to-site virtual private network (VPN) with a service provider?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which of the following is the BEST method of logical network segmentation?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which of the following Is a control message associated with the Internet Control Message Protocol (ICMP)?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which type of security model leverages the use of data science and machine learning (ML) to further enhance threat intelligence?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
An employee has been terminated for policy violations.Security logs from win-webserver01 have been collectedand located in the Investigations folder on theDesktop as win-webserver01_logs.zip.
Generate a SHA256 digest of the System-logs.evtx filewithin the win-webserver01_logs.zip file and providethe output below.
Generate a SHA256 digest of the System-logs.evtx filewithin the win-webserver01_logs.zip file and providethe output below.
Correct Answer:
See the solution in Explanation.
Explanation:
To generate theSHA256 digestof the System-logs.evtx file located within the win-webserver01_logs.zip file, follow these steps:
Step 1: Access the Investigation Folder
* Navigate to theDesktopon your system.
* Open theInvestigationsfolder.
* Locate the file:
win-webserver01_logs.zip
Step 2: Extract the ZIP File
* Right-click on win-webserver01_logs.zip.
* Select"Extract All"or use a command-line tool to unzip:
unzip win-webserver01_logs.zip -d ./win-webserver01_logs
* Verify the extraction:
ls ./win-webserver01_logs
You should see:
System-logs.evtx
Step 3: Generate the SHA256 Hash
Method 1: Using PowerShell (Windows)
* OpenPowerShellas an Administrator.
* Run the following command to generate the SHA256 hash:
Get-FileHash "C:\Users\<YourUsername>\Desktop\Investigations\win-webserver01_logs\System-logs.evtx" - Algorithm SHA256
* The output will look like:
Algorithm Hash Path
--------- ---- ----
SHA256 d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d C:\Users\...\System-logs.
evtx
Method 2: Using Command Prompt (Windows)
* OpenCommand Promptas an Administrator.
* Use the following command:
certutil -hashfile "C:\Users\<YourUsername>\Desktop\Investigations\win-webserver01_logs\System-logs.
evtx" SHA256
* Example output:
SHA256 hash of System-logs.evtx:
d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d
CertUtil: -hashfile command completed successfully.
Method 3: Using Linux/Mac (if applicable)
* Open a terminal.
* Run the following command:
sha256sum ./win-webserver01_logs/System-logs.evtx
* Sample output:
d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d System-logs.evtx The SHA256 digest of the System-logs.evtx file is:
d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d
Step 4: Verification and Documentation
* Document the hash for validation and integrity checks.
* Include in your incident report:
* File name:System-logs.evtx
* SHA256 Digest:d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d
* Date of Hash Generation:(today's date)
Step 5: Next Steps
* Integrity Verification:Cross-check the hash if you need to transfer or archive the file.
* Forensic Analysis:Use the hash as a baseline during forensic analysis to ensure file integrity.
Explanation:
To generate theSHA256 digestof the System-logs.evtx file located within the win-webserver01_logs.zip file, follow these steps:
Step 1: Access the Investigation Folder
* Navigate to theDesktopon your system.
* Open theInvestigationsfolder.
* Locate the file:
win-webserver01_logs.zip
Step 2: Extract the ZIP File
* Right-click on win-webserver01_logs.zip.
* Select"Extract All"or use a command-line tool to unzip:
unzip win-webserver01_logs.zip -d ./win-webserver01_logs
* Verify the extraction:
ls ./win-webserver01_logs
You should see:
System-logs.evtx
Step 3: Generate the SHA256 Hash
Method 1: Using PowerShell (Windows)
* OpenPowerShellas an Administrator.
* Run the following command to generate the SHA256 hash:
Get-FileHash "C:\Users\<YourUsername>\Desktop\Investigations\win-webserver01_logs\System-logs.evtx" - Algorithm SHA256
* The output will look like:
Algorithm Hash Path
--------- ---- ----
SHA256 d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d C:\Users\...\System-logs.
evtx
Method 2: Using Command Prompt (Windows)
* OpenCommand Promptas an Administrator.
* Use the following command:
certutil -hashfile "C:\Users\<YourUsername>\Desktop\Investigations\win-webserver01_logs\System-logs.
evtx" SHA256
* Example output:
SHA256 hash of System-logs.evtx:
d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d
CertUtil: -hashfile command completed successfully.
Method 3: Using Linux/Mac (if applicable)
* Open a terminal.
* Run the following command:
sha256sum ./win-webserver01_logs/System-logs.evtx
* Sample output:
d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d System-logs.evtx The SHA256 digest of the System-logs.evtx file is:
d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d
Step 4: Verification and Documentation
* Document the hash for validation and integrity checks.
* Include in your incident report:
* File name:System-logs.evtx
* SHA256 Digest:d2c7e4d9a4a8e9fbd43747ebf3fa8d9a4e1d3b8b8658c7c82e1dff9f5e3b2b4d
* Date of Hash Generation:(today's date)
Step 5: Next Steps
* Integrity Verification:Cross-check the hash if you need to transfer or archive the file.
* Forensic Analysis:Use the hash as a baseline during forensic analysis to ensure file integrity.
Which of the following BEST enables an organization to identify potential security threats by monitoring and analyzing network traffic for unusual activity?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which of the following Is the MOST effective way to ensure an organization's management of supply chain risk remains consistent?
Correct Answer: D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
