ACAS Best Practice Knowledge Exam 1, 2,
3, 4, 5 & 6 (BPG Exam 1-6) Questions And
Answers;; RATED A+
Select the Task Order for the Implementation of Assured Compliance Assessment Solution (ACAS) for the
Enterprise:
a. 12-0501
b. 13-0294
c. 16-0294
d. 20-0020 - ANSWER d
What is ACAS?
Select the best answer.
a. ACAS is a system that ensures security for the DoD Networks.
b. ACAS is a system that monitors and corrects vulnerabilities to provide security for the DoD networks.
c. ACAS is the Army Centralized Arial Sensor System.
d. ACAS is a suite of commercial off-the-shelf (COTS) products used to accurately assess the configuration
compliance of DoD enterprise networks and connected system against DoD standards. - ANSWER d
Select the component (below) with the letter of the matching description.
Drag the software tool to the bar beside the matching description of the component .
a. The passive scanner that detects vulnerabilities by sniffing network traffic
,b. The tool that probes hosts and does active vulnerability and compliance scanning
c. The central console that provides continuous endpoint security and compliance monitoring
d. The tool that can manage scan data, run scans and pull in data from various Nessus Agents
e. A lightweight program installed on the endpoint that gives you visibility into other IT assets that
connect intermittently to the internet - ANSWER a. Nessus Network Monitor
b. Nessus
c. Tenable.sc
d. Nessus Manager
e. Nessus Agent
You have just logged in to your new instance of Tenable.sc. You are in California. The default local time
zone is set to EST (New York). Where would you change the time zone to California in the Tenable.sc?
Select the best answer.
a. Dashboard > Dashboard
b. Username Menu > Feeds
c. Username Menu > Profile
d. Workflow > Tickets
e. Username Menu > Help - ANSWER c
You were just directed to update the version of your Tenable.sc. Where would you see the version of
your current Tenable.sc in the tool itself?
Select the best answer.
a. Dashboard > Assurance Report Cards
b. Username Menu > About
c. Workflow > Alerts
d. Reporting > Reports - ANSWER b
, On which website would you look for the ACAS documentation?
Select the best answer.
a. eMASS website
b. Path Repository
c. DEPS portal
d. Cyber Exchange - ANSWER b
Match the building block term with the matching description below.
Drag the definition/description to the bar beside the appropriate building block. Then drop it.
a. Repository
b. Organization
c. Zone
d. Plugin - ANSWER a. A set of proprietary data files that stores scan results and resides on the Tenable.sc
b. A group(s) of users responsible for a secific set(s) of assets
c. A defined static range of IP addresses with an associated Nessus scanner(s)
d. A script file used to collect and interpret vulnerability, compliance, and configuration data
The IP address(es) you are scanning must be contained in both the definition of the scan zone and the
definition of the repository. Will Repository A accept the Scan Results for IP 192.168.1.10?
a. Yes, because the IP address is in the scan zone definition.
b. Yes, because the Repository definition contains that IP address.
c. No, because the IP address in not in the Repository definition.
d. No, because you must have two Repositories. - ANSWER c
Per the ACAS contract, how can you get your Tenable.sc plugin updates?
3, 4, 5 & 6 (BPG Exam 1-6) Questions And
Answers;; RATED A+
Select the Task Order for the Implementation of Assured Compliance Assessment Solution (ACAS) for the
Enterprise:
a. 12-0501
b. 13-0294
c. 16-0294
d. 20-0020 - ANSWER d
What is ACAS?
Select the best answer.
a. ACAS is a system that ensures security for the DoD Networks.
b. ACAS is a system that monitors and corrects vulnerabilities to provide security for the DoD networks.
c. ACAS is the Army Centralized Arial Sensor System.
d. ACAS is a suite of commercial off-the-shelf (COTS) products used to accurately assess the configuration
compliance of DoD enterprise networks and connected system against DoD standards. - ANSWER d
Select the component (below) with the letter of the matching description.
Drag the software tool to the bar beside the matching description of the component .
a. The passive scanner that detects vulnerabilities by sniffing network traffic
,b. The tool that probes hosts and does active vulnerability and compliance scanning
c. The central console that provides continuous endpoint security and compliance monitoring
d. The tool that can manage scan data, run scans and pull in data from various Nessus Agents
e. A lightweight program installed on the endpoint that gives you visibility into other IT assets that
connect intermittently to the internet - ANSWER a. Nessus Network Monitor
b. Nessus
c. Tenable.sc
d. Nessus Manager
e. Nessus Agent
You have just logged in to your new instance of Tenable.sc. You are in California. The default local time
zone is set to EST (New York). Where would you change the time zone to California in the Tenable.sc?
Select the best answer.
a. Dashboard > Dashboard
b. Username Menu > Feeds
c. Username Menu > Profile
d. Workflow > Tickets
e. Username Menu > Help - ANSWER c
You were just directed to update the version of your Tenable.sc. Where would you see the version of
your current Tenable.sc in the tool itself?
Select the best answer.
a. Dashboard > Assurance Report Cards
b. Username Menu > About
c. Workflow > Alerts
d. Reporting > Reports - ANSWER b
, On which website would you look for the ACAS documentation?
Select the best answer.
a. eMASS website
b. Path Repository
c. DEPS portal
d. Cyber Exchange - ANSWER b
Match the building block term with the matching description below.
Drag the definition/description to the bar beside the appropriate building block. Then drop it.
a. Repository
b. Organization
c. Zone
d. Plugin - ANSWER a. A set of proprietary data files that stores scan results and resides on the Tenable.sc
b. A group(s) of users responsible for a secific set(s) of assets
c. A defined static range of IP addresses with an associated Nessus scanner(s)
d. A script file used to collect and interpret vulnerability, compliance, and configuration data
The IP address(es) you are scanning must be contained in both the definition of the scan zone and the
definition of the repository. Will Repository A accept the Scan Results for IP 192.168.1.10?
a. Yes, because the IP address is in the scan zone definition.
b. Yes, because the Repository definition contains that IP address.
c. No, because the IP address in not in the Repository definition.
d. No, because you must have two Repositories. - ANSWER c
Per the ACAS contract, how can you get your Tenable.sc plugin updates?
