ACAS Review Questions and Answers
A What is ACAS? Select the best answer.
A. ACAS is a network-based security compliance and assessment capability
designed to provide awareness of the security posture and network health of
DoD networks.
B. ACAS is a system that ensures security for the DoD networks.
C. ACAS is a system that monitors and corrects vulnerabilities to provide security
for the DoD networks.
D. All of the above
*** Module 1-1 ***
D Which of the following best describes the SecurityCenter? Select the best
answer.
A. A topology viewer that provides graphical analysis information
B. The passive scanner that detects vulnerabilities by sniffing network traffic
C. The active scanner that probes hosts
D. The central console that provides continuous asset-based security and
compliance monitoring
*** Module 1-1 ***
False True/False
A vulnerability is a weakness or an attack that can compromise your system.
*** Module 1-1 ***
True True/False
The Nessus scanner monitors data at rest, while the PVS monitors data in
motion.
*** Module 1-1 ***
True True/False
PVS detects vulnerabilities based on network traffic instead of actively scanning
hosts.
*** Module 1-1 ***
C Which ACAS component performs active vulnerability and compliance scanning?
Select the best answer.
A. 3D Tool
B. PVS
C. Nessus
D. SecurityCenter
*** Module 1-1 ***
True True/False
CMRS is a tool to provide DoD component- and enterprise-level situational
awareness by quantitatively displaying an organization's security posture.
*** Module 1-1 ***
, ACAS Review Questions and Answers
B Select the Task Order for the Implementation of Assured Compliance
Assessment Solution (ACAS) for the Enterprise:
A. 12-501
B. 13-670
C. 13-294
D. 14-0294
*** Module 1-1 ***
A Which page loads by default when you log in to SecurityCenter? Select the best
answer. Select the best answer.
A. Dashboard
B. Analysis
C. Reporting
D. Scanning
*** Module 1-2 ***
B, E Which of the following pages show the date and time of the most recent plugin
updates? Select all that apply.
A. Alerts
B. Plugins
C. Preferences
D. System Status
E. Feeds
*** Module 1-2 ***
C Which page allows you to set your local time zone? Select the best answer.
A. Dashboard
B. Feeds
C. Profile
D. Workflow
*** Module 1-2 ***
B What is an organization? Select the best answer.
A. A database of vulnerability data defined by assets or IP addresses
B. A group of individuals who are responsible for a set of common assets
C. A defined static range of IP addresses with an associated Nessus scanner(s)
D. A script file used to collect and interpret vulnerability, compliance, and
configuration data
*** Module 1-3 ***
, ACAS Review Questions and Answers
C What is a scan zone? Select the best answer.
A. A database of vulnerability data defined by assets or IP addresses
B. A group of individuals who are responsible for a set of common assets
C. A defined static range of IP addresses with an associated Nessus scanner(s)
D. A script files used to collect and interpret vulnerability, compliance, and
configuration data
*** Module 1-3 ***
D What is the maximum size of a SecurityCenter 5 Repository? Select the best
answer.
A. 2 GB
B. 4 GB
C. 16 GB
D. 32 GB
*** Module 1-3 ***
True True/False
The IP address(es) you are scanning must be contained in both the definition of
the scan zone and the definition of the repository.
*** Module 1-3 ***
A What SecurityCenter role is responsible for setting up scan zones? Select the
best answer.
A. Administrator
B. Manager
C. Security Manager
D. End User
*** Module 1-3 ***
A, B How can you get your SecurityCenter plugin updates? Select all that apply.
A. Automatically, from DISA's plugin server
B. Manually from the DoD Patch Repository
C. Download a copy from the vendor
*** Module 1-3 ***
True True/False
The SecurityCenter Plugins menu displays a list of script files used by Nessus
and PVS scanners to collect and interpret vulnerability, compliance, and
configuration data.
*** Module 1-3 ***
A What is ACAS? Select the best answer.
A. ACAS is a network-based security compliance and assessment capability
designed to provide awareness of the security posture and network health of
DoD networks.
B. ACAS is a system that ensures security for the DoD networks.
C. ACAS is a system that monitors and corrects vulnerabilities to provide security
for the DoD networks.
D. All of the above
*** Module 1-1 ***
D Which of the following best describes the SecurityCenter? Select the best
answer.
A. A topology viewer that provides graphical analysis information
B. The passive scanner that detects vulnerabilities by sniffing network traffic
C. The active scanner that probes hosts
D. The central console that provides continuous asset-based security and
compliance monitoring
*** Module 1-1 ***
False True/False
A vulnerability is a weakness or an attack that can compromise your system.
*** Module 1-1 ***
True True/False
The Nessus scanner monitors data at rest, while the PVS monitors data in
motion.
*** Module 1-1 ***
True True/False
PVS detects vulnerabilities based on network traffic instead of actively scanning
hosts.
*** Module 1-1 ***
C Which ACAS component performs active vulnerability and compliance scanning?
Select the best answer.
A. 3D Tool
B. PVS
C. Nessus
D. SecurityCenter
*** Module 1-1 ***
True True/False
CMRS is a tool to provide DoD component- and enterprise-level situational
awareness by quantitatively displaying an organization's security posture.
*** Module 1-1 ***
, ACAS Review Questions and Answers
B Select the Task Order for the Implementation of Assured Compliance
Assessment Solution (ACAS) for the Enterprise:
A. 12-501
B. 13-670
C. 13-294
D. 14-0294
*** Module 1-1 ***
A Which page loads by default when you log in to SecurityCenter? Select the best
answer. Select the best answer.
A. Dashboard
B. Analysis
C. Reporting
D. Scanning
*** Module 1-2 ***
B, E Which of the following pages show the date and time of the most recent plugin
updates? Select all that apply.
A. Alerts
B. Plugins
C. Preferences
D. System Status
E. Feeds
*** Module 1-2 ***
C Which page allows you to set your local time zone? Select the best answer.
A. Dashboard
B. Feeds
C. Profile
D. Workflow
*** Module 1-2 ***
B What is an organization? Select the best answer.
A. A database of vulnerability data defined by assets or IP addresses
B. A group of individuals who are responsible for a set of common assets
C. A defined static range of IP addresses with an associated Nessus scanner(s)
D. A script file used to collect and interpret vulnerability, compliance, and
configuration data
*** Module 1-3 ***
, ACAS Review Questions and Answers
C What is a scan zone? Select the best answer.
A. A database of vulnerability data defined by assets or IP addresses
B. A group of individuals who are responsible for a set of common assets
C. A defined static range of IP addresses with an associated Nessus scanner(s)
D. A script files used to collect and interpret vulnerability, compliance, and
configuration data
*** Module 1-3 ***
D What is the maximum size of a SecurityCenter 5 Repository? Select the best
answer.
A. 2 GB
B. 4 GB
C. 16 GB
D. 32 GB
*** Module 1-3 ***
True True/False
The IP address(es) you are scanning must be contained in both the definition of
the scan zone and the definition of the repository.
*** Module 1-3 ***
A What SecurityCenter role is responsible for setting up scan zones? Select the
best answer.
A. Administrator
B. Manager
C. Security Manager
D. End User
*** Module 1-3 ***
A, B How can you get your SecurityCenter plugin updates? Select all that apply.
A. Automatically, from DISA's plugin server
B. Manually from the DoD Patch Repository
C. Download a copy from the vendor
*** Module 1-3 ***
True True/False
The SecurityCenter Plugins menu displays a list of script files used by Nessus
and PVS scanners to collect and interpret vulnerability, compliance, and
configuration data.
*** Module 1-3 ***
