ACAS BEST PRACTICE KNOWLEDGE EXAM
1,2,3,4,5 AND 6 2025/ 2026 QUESTIONS
WITH VERIFIED ANSWERS
It has been 20 days since your last configuration (STIG) scan. Per
FRAGO 2 of the Task Order 20-0020, which of the following
statements reflects your current compliance status?
Select the best answer.
In compliance because configuration scans are only required
every 30 days.
In compliance because vulnerability scans are only required every
21 days.
Out of compliance because configuration scans are required
every 14 days.
Out of compliance because vulnerability scans are required every
single day. - correct answer -a
Choose the Tenable.sc Severity Level that corresponds to the
Configuration result.
Tenable re-used severity levels for configuration results.
,To answer the question, drag the definition to the appropriate
severity below.
a. Critical
b. High
c. Medium
d. Info - correct answer -a. Not used with configuration
b. Failed configuration check
c. Unable to Determine/Error
d. Passed configuration check
Per the ACAS Best Practices Guide, which of the following
Tenable.sc resources are proprietary formatted XML files that
define how ACAS should check for configuration with a specified
STIG?
Select the best answer.
a. Credentials
b. Queries
c. Policies
d. Audit Files - correct answer -d
,What are the steps to run a Configuration audit scan? Put the
statements in the correct order.
Drag and drop the statements in the boxes to indicate the correct
order.
Create the Active Scan job
Create an Audit form the Tenable Audit files.
Edit the Configuration Scan Policy by adding the audit file on the
Compliance tab
Launch the scan
Review the results - correct answer -Create the Active Scan job
Create an Audit form the Tenable Audit files.
Edit the Configuration Scan Policy by adding the audit file on the
Compliance tab
Launch the scan
Review the results
Per the ACAS Best Practices Guide, what could a dynamic asset
list that contains the following be used for?
ANY of the following are true:
, Plugin ID is equal to 24786
Plugin ID is equal to 104410
Plugin ID is equal to 110385
Plugin ID is equal to 110723
Plugin ID is equal to 102094
Select the best answer.
Plugins out of sync
Authentication and access failures
Good active vulnerability scan results.
Nessus Scanner Timeouts - correct answer -b
When you create dynamic asset list(s), which of the following
occurs? Select the best answer.
a. Tenable.sc runs a scan to find assets that match the dynamic
asset list's rules.
b. Tenable.sc queries the repository(ies) to find assets that match
the dynamic asset list's rules.
c. Tanium runs a query to find the answer. - correct answer -b
1,2,3,4,5 AND 6 2025/ 2026 QUESTIONS
WITH VERIFIED ANSWERS
It has been 20 days since your last configuration (STIG) scan. Per
FRAGO 2 of the Task Order 20-0020, which of the following
statements reflects your current compliance status?
Select the best answer.
In compliance because configuration scans are only required
every 30 days.
In compliance because vulnerability scans are only required every
21 days.
Out of compliance because configuration scans are required
every 14 days.
Out of compliance because vulnerability scans are required every
single day. - correct answer -a
Choose the Tenable.sc Severity Level that corresponds to the
Configuration result.
Tenable re-used severity levels for configuration results.
,To answer the question, drag the definition to the appropriate
severity below.
a. Critical
b. High
c. Medium
d. Info - correct answer -a. Not used with configuration
b. Failed configuration check
c. Unable to Determine/Error
d. Passed configuration check
Per the ACAS Best Practices Guide, which of the following
Tenable.sc resources are proprietary formatted XML files that
define how ACAS should check for configuration with a specified
STIG?
Select the best answer.
a. Credentials
b. Queries
c. Policies
d. Audit Files - correct answer -d
,What are the steps to run a Configuration audit scan? Put the
statements in the correct order.
Drag and drop the statements in the boxes to indicate the correct
order.
Create the Active Scan job
Create an Audit form the Tenable Audit files.
Edit the Configuration Scan Policy by adding the audit file on the
Compliance tab
Launch the scan
Review the results - correct answer -Create the Active Scan job
Create an Audit form the Tenable Audit files.
Edit the Configuration Scan Policy by adding the audit file on the
Compliance tab
Launch the scan
Review the results
Per the ACAS Best Practices Guide, what could a dynamic asset
list that contains the following be used for?
ANY of the following are true:
, Plugin ID is equal to 24786
Plugin ID is equal to 104410
Plugin ID is equal to 110385
Plugin ID is equal to 110723
Plugin ID is equal to 102094
Select the best answer.
Plugins out of sync
Authentication and access failures
Good active vulnerability scan results.
Nessus Scanner Timeouts - correct answer -b
When you create dynamic asset list(s), which of the following
occurs? Select the best answer.
a. Tenable.sc runs a scan to find assets that match the dynamic
asset list's rules.
b. Tenable.sc queries the repository(ies) to find assets that match
the dynamic asset list's rules.
c. Tanium runs a query to find the answer. - correct answer -b
