\\\
ACAS Best Practice Knowledge Exam 1,2,3,4,5 and 6
Questions And Answers With Complete Solutions
Select the Task Order for the Implementation of Assured Compliance Assessment
Solution (ACAS) for the Enterprise:
a. 12-0501
b. 13-0294
c. 16-0294
d. 20-0020 - ANSWER d
What is ACAS?
Select the best answer.
a. ACAS is a system that ensures security for the DoD Networks.
b. ACAS is a system that monitors and corrects vulnerabilities to provide security for
the DoD networks.
c. ACAS is the Army Centralized Arial Sensor System.
d. ACAS is a suite of commercial off-the-shelf (COTS) products used to accurately
assess the configuration compliance of DoD enterprise networks and connected
system against DoD standards. - ANSWER d
Select the component (below) with the letter of the matching description.
Drag the software tool to the bar beside the matching description of the component .
a. The passive scanner that detects vulnerabilities by sniffing network traffic
b. The tool that probes hosts and does active vulnerability and compliance scanning
c. The central console that provides continuous endpoint security and compliance
monitoring
d. The tool that can manage scan data, run scans and pull in data from various
Nessus Agents
e. A lightweight program installed on the endpoint that gives you visibility into other
IT assets that connect intermittently to the internet - ANSWER a. Nessus Network
Monitor
b. Nessus
c. Tenable.sc
d. Nessus Manager
e. Nessus Agent
You have just logged in to your new instance of Tenable.sc. You are in California.
The default local time zone is set to EST (New York). Where would you change the
time zone to California in the Tenable.sc?
Select the best answer.
, a. Dashboard > Dashboard
b. Username Menu > Feeds
c. Username Menu > Profile
d. Workflow > Tickets
e. Username Menu > Help - ANSWER c
You were just directed to update the version of your Tenable.sc. Where would you
see the version of your current Tenable.sc in the tool itself?
Select the best answer.
a. Dashboard > Assurance Report Cards
b. Username Menu > About
c. Workflow > Alerts
d. Reporting > Reports - ANSWER b
On which website would you look for the ACAS documentation?
Select the best answer.
a. eMASS website
b. Path Repository
c. DEPS portal
d. Cyber Exchange - ANSWER b
Match the building block term with the matching description below.
Drag the definition/description to the bar beside the appropriate building block. Then
drop it.
a. Repository
b. Organization
c. Zone
d. Plugin - ANSWER a. A set of proprietary data files that stores scan results and
resides on the Tenable.sc
b. A group(s) of users responsible for a secific set(s) of assets
c. A defined static range of IP addresses with an associated Nessus scanner(s)
d. A script file used to collect and interpret vulnerability, compliance, and
configuration data
The IP address(es) you are scanning must be contained in both the definition of the
scan zone and the definition of the repository. Will Repository A accept the Scan
Results for IP 192.168.1.10?
a. Yes, because the IP address is in the scan zone definition.
b. Yes, because the Repository definition contains that IP address.
c. No, because the IP address in not in the Repository definition.
d. No, because you must have two Repositories. - ANSWER c
Per the ACAS contract, how can you get your Tenable.sc plugin updates?
ACAS Best Practice Knowledge Exam 1,2,3,4,5 and 6
Questions And Answers With Complete Solutions
Select the Task Order for the Implementation of Assured Compliance Assessment
Solution (ACAS) for the Enterprise:
a. 12-0501
b. 13-0294
c. 16-0294
d. 20-0020 - ANSWER d
What is ACAS?
Select the best answer.
a. ACAS is a system that ensures security for the DoD Networks.
b. ACAS is a system that monitors and corrects vulnerabilities to provide security for
the DoD networks.
c. ACAS is the Army Centralized Arial Sensor System.
d. ACAS is a suite of commercial off-the-shelf (COTS) products used to accurately
assess the configuration compliance of DoD enterprise networks and connected
system against DoD standards. - ANSWER d
Select the component (below) with the letter of the matching description.
Drag the software tool to the bar beside the matching description of the component .
a. The passive scanner that detects vulnerabilities by sniffing network traffic
b. The tool that probes hosts and does active vulnerability and compliance scanning
c. The central console that provides continuous endpoint security and compliance
monitoring
d. The tool that can manage scan data, run scans and pull in data from various
Nessus Agents
e. A lightweight program installed on the endpoint that gives you visibility into other
IT assets that connect intermittently to the internet - ANSWER a. Nessus Network
Monitor
b. Nessus
c. Tenable.sc
d. Nessus Manager
e. Nessus Agent
You have just logged in to your new instance of Tenable.sc. You are in California.
The default local time zone is set to EST (New York). Where would you change the
time zone to California in the Tenable.sc?
Select the best answer.
, a. Dashboard > Dashboard
b. Username Menu > Feeds
c. Username Menu > Profile
d. Workflow > Tickets
e. Username Menu > Help - ANSWER c
You were just directed to update the version of your Tenable.sc. Where would you
see the version of your current Tenable.sc in the tool itself?
Select the best answer.
a. Dashboard > Assurance Report Cards
b. Username Menu > About
c. Workflow > Alerts
d. Reporting > Reports - ANSWER b
On which website would you look for the ACAS documentation?
Select the best answer.
a. eMASS website
b. Path Repository
c. DEPS portal
d. Cyber Exchange - ANSWER b
Match the building block term with the matching description below.
Drag the definition/description to the bar beside the appropriate building block. Then
drop it.
a. Repository
b. Organization
c. Zone
d. Plugin - ANSWER a. A set of proprietary data files that stores scan results and
resides on the Tenable.sc
b. A group(s) of users responsible for a secific set(s) of assets
c. A defined static range of IP addresses with an associated Nessus scanner(s)
d. A script file used to collect and interpret vulnerability, compliance, and
configuration data
The IP address(es) you are scanning must be contained in both the definition of the
scan zone and the definition of the repository. Will Repository A accept the Scan
Results for IP 192.168.1.10?
a. Yes, because the IP address is in the scan zone definition.
b. Yes, because the Repository definition contains that IP address.
c. No, because the IP address in not in the Repository definition.
d. No, because you must have two Repositories. - ANSWER c
Per the ACAS contract, how can you get your Tenable.sc plugin updates?
