ACAS Best Practice Knowledge Exam 4 BIO171 MICROBIO FULL EXAM

ACAS Best Practice Knowledge Exam 4 - BIO171 MICROBIO FULL EXAM A vulnerability will be marked as mitigated in the T repository if a subsequent scan determines that the vulnerability is no longer present on the endpoint. Select the correct answer. a. True b. False Select the best answer. a. Active Scan View b. Vulnerability Summary c. IP Summary d. Remediation Summary Nessus Agents are lightweight Nessus scanners installed on the endpoint, according to the ACAS Agent Rapid Deployment Guide. Select the best answer. a. True b. False Per the Best Practices Guide, which of the following statements are true? Select the correct answer(s). a. The TASKORD defines several target types on which Nessus Agents are required to be installed. b. Nessus Agents can be installed on addition endpoints above TASKORD requirement. c. Per the TASKORD organizations endpoints which leverage a Nessus Agents must also be scanned with the Nessus active scanner using ACAS Best Practice Guide Agent Differential scan policy. d. If you use Nessus Agents, then you don't need any other scanning tools for ACAS. e. All the above Nessus Agent and Manager use the same software. Select the correct answer. a. True b. False Per the Best Practices Guide, which of these statements is true. Select the correct answers. a. ACAS TASKORD 20-0020 FRAGO 3 clarifies that only DISA STIG Tenable Audit files are to be used for configuration scanning in ACAS. b. DISA SCAP-compliant, automated benchmarks are still acceptable for ingest into CMRS. c. Audit files are proprietary formatted XML files that define how ACAS should check for configuration with a specified benchmark. d. Tenable distributes audit files via the the T Feed that is used to update T e. None of the above It has been 20 days since your last configuration (STIG) scan. Per FRAGO 2 of the Task Order 20-0020, which of the following statements reflects your current compliance status? Select the best answer. In compliance because configuration scans are only required every 30 days. In compliance because vulnerability scans are only required every 21 days. Out of compliance because configuration scans are required every 14 days. Out of compliance because vulnerability scans are required every single day. Choose the T Severity Level that corresponds to the Configuration result. Tenable re-used severity levels for configuration results. To answer the question, drag the definition to the appropriate severity below. a. Critical b. High c. Medium d. Info Per the ACAS Best Practices Guide, which of the following T resources are proprietary formatted XML files that define how ACAS should check for configuration with a specified STIG? Select the best answer. a. Credentials b. Queries c. Policies d. Audit Files What are the steps to run a Configuration audit scan? Put the statements in the correct order. Drag and drop the statements in the boxes to indicate the correct order. Create the Active Scan job Create an Audit form the Tenable Audit files. Edit the Configuration Scan Policy by adding the audit file on the Compliance tab Launch the scan Review the results