ACAS STAN/EVAL NOTES/STUDY
A Nessus Scanner covers numerous check, including unique Common Vulnerabilities and
Exposures (CVEs), and successfully operates across different environments. What else does it
do? - ANS-Serves as an active vulnerability scanner, Evaluates processes running on the host,
Probes the host's network services.
What are the standard ACAS Components? - ANS-Nessus Scanner & Security Center
What is ACAS? - ANS-Assured Compliance Assessment Solutions.
How does the Air Force utilize ACAS? - ANS-Detects known cyber threats on enterprise assets.
What kind of product is ACAS? - ANS-COTS
Where does ACAS come from? - ANS-Tenable Network Security?
What specifically can ACAS through automated network scanning? - ANS-Provides vulnerability
scanning, application vulnerability scanning, configuration assessment, device configuration
assessment, network discovery, compliance reporting, & compliance
accountability/enforcement.
What are some of the Security Centers capabilities? - ANS-Provides complete visibility into the
security posture of the IT infrastructure. Evaluates al vulnerability data across entire IT
infrastructure. Analyzes vulnerabilities, provides solutions to said vulnerabilities. Illustrates
vulnerability trends over time, and assesses risk. Actionable context for effective remediation in
prioritized order for assessed systems/devices/risks.
What are some of the ACAS capabilities? - ANS-Active Vulnerability Scanning, Credentialed
Vulnerability Scanning, Reporting, & Enumeration.
What is a major ACAS limitation when vulnerabilities are found in the reports it generates? -
ANS-ACAS cannot apply patches or alter configuration settings, only reports scan findings.
What is a major ACAS limitation in regards to functionality and work stoppage? - ANS-Too many
concurrent tasks can overload/lock databases and cease functions.
How does a decentralized scanner a limitation in ACAS? - ANS-Requires base technicians to
troubleshoot and perform regular touch maintenance.
How could the scope of an vulnerability scan limit ACAS performance? - ANS-Can only scan
internal base network.
A Nessus Scanner covers numerous check, including unique Common Vulnerabilities and
Exposures (CVEs), and successfully operates across different environments. What else does it
do? - ANS-Serves as an active vulnerability scanner, Evaluates processes running on the host,
Probes the host's network services.
What are the standard ACAS Components? - ANS-Nessus Scanner & Security Center
What is ACAS? - ANS-Assured Compliance Assessment Solutions.
How does the Air Force utilize ACAS? - ANS-Detects known cyber threats on enterprise assets.
What kind of product is ACAS? - ANS-COTS
Where does ACAS come from? - ANS-Tenable Network Security?
What specifically can ACAS through automated network scanning? - ANS-Provides vulnerability
scanning, application vulnerability scanning, configuration assessment, device configuration
assessment, network discovery, compliance reporting, & compliance
accountability/enforcement.
What are some of the Security Centers capabilities? - ANS-Provides complete visibility into the
security posture of the IT infrastructure. Evaluates al vulnerability data across entire IT
infrastructure. Analyzes vulnerabilities, provides solutions to said vulnerabilities. Illustrates
vulnerability trends over time, and assesses risk. Actionable context for effective remediation in
prioritized order for assessed systems/devices/risks.
What are some of the ACAS capabilities? - ANS-Active Vulnerability Scanning, Credentialed
Vulnerability Scanning, Reporting, & Enumeration.
What is a major ACAS limitation when vulnerabilities are found in the reports it generates? -
ANS-ACAS cannot apply patches or alter configuration settings, only reports scan findings.
What is a major ACAS limitation in regards to functionality and work stoppage? - ANS-Too many
concurrent tasks can overload/lock databases and cease functions.
How does a decentralized scanner a limitation in ACAS? - ANS-Requires base technicians to
troubleshoot and perform regular touch maintenance.
How could the scope of an vulnerability scan limit ACAS performance? - ANS-Can only scan
internal base network.
