ACAS End of Module Review Questions with Complete Solutions

A - cORRECT sOLUTION What is ACAS? Select the best answer. A. ACAS is a network-based security compliance and assessment capability designed to provide awareness of the security posture and network health of DoD networks. B. ACAS is a system that ensures security for the DoD networks. C. ACAS is a system that monitors and corrects vulnerabilities to provide security for the DoD networks. D. All of the above **** Module 1-1 **** D - cORRECT sOLUTION Which of the following best describes the SecurityCenter? Select the best answer. A. A topology viewer that provides graphical analysis information B. The passive scanner that detects vulnerabilities by sniffing network traffic C. The active scanner that probes hosts D. The central console that provides continuous asset-based security and compliance monitoring **** Module 1-1 **** False - cORRECT sOLUTION True/False A vulnerability is a weakness or an attack that can compromise your system. **** Module 1-1 **** True - cORRECT sOLUTION True/False The Nessus scanner monitors data at rest, while the PVS monitors data in motion. **** Module 1-1 **** True - cORRECT sOLUTION True/False PVS detects vulnerabilities based on network traffic instead of actively scanning hosts. **** Module 1-1 **** C - cORRECT sOLUTION Which ACAS component performs active vulnerability and compliance scanning? Select the best answer. A. 3D Tool B. PVS C. Nessus D. SecurityCenter **** Module 1-1 **** True - cORRECT sOLUTION True/False CMRS is a tool to provide DoD component- and enterprise-level situational awareness by quantitatively displaying an organization's security posture. **** Module 1-1 **** B - cORRECT sOLUTION Select the Task Order for the Implementation of Assured Compliance Assessment Solution (ACAS) for the Enterprise: A. 12-501 B. 13-670 C. 13-294 D. 14-0294 **** Module 1-1 **** A - cORRECT sOLUTION Which page loads by default when you log in to SecurityCenter? Select the best answer. Select the best answer. A. Dashboard B. Analysis C. Reporting D. Scanning