ACAS Review Questions with Verified Solutions

Which of these are key drivers of the vulnerability priority ratings (VPR)? -Vulnerability age -Exploit code maturity -Threat sources -Threat intensity -All of the above - All of the above T/F Asset lists are dynamically or statically generated lists of hosts - True Which type of asset list uses rules and updates automatically when a scan runs and a repository is updated? - Dynamic A list of IP addresses that requires user intervention in order to change what defines them is a ____________. - Static asset list What tow ways can you use to add a dynamic asset list? -Use a template or create a set of rules -Use a scan policy or a template -Create a set of rules or a scan policy -Both B and C - Use a template or create a set of rules When you create dynamic asset lists, which of the following occurs? -T runs a scan to find assets that match the dynamic asset list's rules -T queries the repo to find assets that match the dynamic asset list's rules - T queries the repo to find assets that match the dynamic asset list's rules T/F Users in different groups using the same shared asset list could see different IP addresses in the list. - True The NNM monitors data at the ________ layer? - Packet All of the following are benefits of the NNM, except ___________. -Network deployment on several different operating systems -Monitoring your network between active scans -Identifying vulnerabilities in areas where you cannot actively scan -Eliminating the need for active scans - Eliminating the need for active scans Which of the following statements is true? -The NNM is capable of highlighting all interactive and encrypted network sessions -The NNM is capable of decrypting encrypted network sessions - The NNM is capable of decrypting encrypted network sessions