ACAS - 5.3 Course
Study online at https://quizlet.com/_8j5o7u
1. What is ACAS?: ACAS is a network-based security compliance and assessment
capability
designed to provide awareness of the security posture and network health of
DoD networks.
2. Which of the following best describes the SecurityCenter?: The central con-
sole that provides continuous asset-based security and
compliance monitoring
3. A vulnerability is a weakness or an attack that can compromise your sys-
tem.: False (a vulnerability does not include an attack)
4. The Nessus scanner monitors data at rest, while the PVS monitors data in
motion.: True
5. PVS detects vulnerabilities based on network traffic instead of actively
scanning hosts.: True
6. Which ACAS component performs active vulnerability and compliance
scanning?: Nessus
7. CMRS is a tool to provide DoD component- and enterprise-level situational
awareness by quantitatively displaying an organization's security posture.: -
True
8. Select the Task Order for the Implementation of Assured Compliance As-
sessment Solution (ACAS) for the Enterprise:: 13-670
9. Which page loads by default when you log in to SecurityCenter? Select the
best answer.: Dashboard
10. Which of the following pages show the date and time of the most recent
plugin updates?: Plugins, Feeds
11. Which page allows you to set your local time zone?: Profile
12. What is an organization?: A group of individuals who are responsible for a set
of common assets
13. What is a scan zone?: A defined static range of IP addresses with an associ-
ated Nessus scanner(s)
14. What is the maximum size of a SecurityCenter 5 Repository?: 32 GB
15. The IP address(es) you are scanning must be contained in both the defin-
ition of the scan zone and the definition of the repository.: True
16. What SecurityCenter role is responsible for setting up scan zones?: Ad-
ministrator
17. How can you get your SecurityCenter plugin updates?: Automatically, from
DISA's plugin server, Manually from the DoD Patch Repository
18. The SecurityCenter Plugins menu displays a list of script files used by
Nessus and PVS scanners to collect and interpret vulnerability, compliance,
and configuration data.: True
This study source was downloaded by 100000899562851 from CourseHero.com on 06-11-2025 10:28:25 GMT -05:00
1/6
https://www.coursehero.com/file/249934617/ACAS-53-Coursepdf/
, ACAS - 5.3 Course
Study online at https://quizlet.com/_8j5o7u
19. Which of the following are options you can consider for scanning
stand-alone networks?: Install both Nessus and SecurityCenter on a Linux Laptop
using Kickstart, Install both Nessus and SecurityCenter in virtual machines on a
Windows 7 laptop, Detach a Nessus scanner from its SecurityCenter for scanning
purposes and then reattach to SecurityCenter to upload scan results
20. Components of an Active Vulnerability Scan consist of: a policy, creden-
tials, scan zone, schedule, _________, and __________.: Repository, Target list
21. _________ are administrative-level usernames and passwords (or SSH
keypairs) used in authenticated scans?: Credentials
22. You can associate multiple credentials with a single scan.: True
23. Networks using Dynamic Host Configuration Protocol (DHCP) require that
this Active Scan setting be enabled to properly track hosts.: Track hosts which
have been issued IP addresses
24. Which type of scan obtains information by authenticating to the host to
access resources not available over the network.: Credentialed
25. You may only select one import repository per scan.: True
26. Once a scan is running, you cannot pause or stop the scan until it has
completed running.: False
27. Which Port Scanning Range option tells the scanner to scan only common
ports?: default (of 4605 common ports)
28. In a low-bandwidth environment, which of the following options might you
adjust to try to improve scanning performance?: Max Simultaneous Checks Per
Host, Max Simultaneous Hosts Per Scan
29. What is the function of Performance Options in the Scan Policy?: Deter-
mines the impact of a scan related to scan times and network behavior
30. You can configure the targets for your Blackout Window to include which
of the following?: All Systems, Assets, IPs, Mixed
31. Which of the following Scan Policy types allows you to select Plugin
Families you want?: Custom Advanced Scan
32. Asset lists are dynamically or statically generated lists of hosts.: True
33. Which type of asset list updates automatically when a scan runs and a
repository is updated?: Dynamic
34. What is a static asset list?: A list of IP addresses that require user intervention
in order to change what defines them
35. What two ways can you use to add a dynamic asset list?: Use a template or
create a set of rules, Create a set of rules or a scan policy
36. When you create dynamic asset list(s), which of the following occurs?: Se-
curityCenter queries the repository(ies) to find assets that match the dynamic asset
list's rules.
This study source was downloaded by 100000899562851 from CourseHero.com on 06-11-2025 10:28:25 GMT -05:00
2/6
https://www.coursehero.com/file/249934617/ACAS-53-Coursepdf/
Study online at https://quizlet.com/_8j5o7u
1. What is ACAS?: ACAS is a network-based security compliance and assessment
capability
designed to provide awareness of the security posture and network health of
DoD networks.
2. Which of the following best describes the SecurityCenter?: The central con-
sole that provides continuous asset-based security and
compliance monitoring
3. A vulnerability is a weakness or an attack that can compromise your sys-
tem.: False (a vulnerability does not include an attack)
4. The Nessus scanner monitors data at rest, while the PVS monitors data in
motion.: True
5. PVS detects vulnerabilities based on network traffic instead of actively
scanning hosts.: True
6. Which ACAS component performs active vulnerability and compliance
scanning?: Nessus
7. CMRS is a tool to provide DoD component- and enterprise-level situational
awareness by quantitatively displaying an organization's security posture.: -
True
8. Select the Task Order for the Implementation of Assured Compliance As-
sessment Solution (ACAS) for the Enterprise:: 13-670
9. Which page loads by default when you log in to SecurityCenter? Select the
best answer.: Dashboard
10. Which of the following pages show the date and time of the most recent
plugin updates?: Plugins, Feeds
11. Which page allows you to set your local time zone?: Profile
12. What is an organization?: A group of individuals who are responsible for a set
of common assets
13. What is a scan zone?: A defined static range of IP addresses with an associ-
ated Nessus scanner(s)
14. What is the maximum size of a SecurityCenter 5 Repository?: 32 GB
15. The IP address(es) you are scanning must be contained in both the defin-
ition of the scan zone and the definition of the repository.: True
16. What SecurityCenter role is responsible for setting up scan zones?: Ad-
ministrator
17. How can you get your SecurityCenter plugin updates?: Automatically, from
DISA's plugin server, Manually from the DoD Patch Repository
18. The SecurityCenter Plugins menu displays a list of script files used by
Nessus and PVS scanners to collect and interpret vulnerability, compliance,
and configuration data.: True
This study source was downloaded by 100000899562851 from CourseHero.com on 06-11-2025 10:28:25 GMT -05:00
1/6
https://www.coursehero.com/file/249934617/ACAS-53-Coursepdf/
, ACAS - 5.3 Course
Study online at https://quizlet.com/_8j5o7u
19. Which of the following are options you can consider for scanning
stand-alone networks?: Install both Nessus and SecurityCenter on a Linux Laptop
using Kickstart, Install both Nessus and SecurityCenter in virtual machines on a
Windows 7 laptop, Detach a Nessus scanner from its SecurityCenter for scanning
purposes and then reattach to SecurityCenter to upload scan results
20. Components of an Active Vulnerability Scan consist of: a policy, creden-
tials, scan zone, schedule, _________, and __________.: Repository, Target list
21. _________ are administrative-level usernames and passwords (or SSH
keypairs) used in authenticated scans?: Credentials
22. You can associate multiple credentials with a single scan.: True
23. Networks using Dynamic Host Configuration Protocol (DHCP) require that
this Active Scan setting be enabled to properly track hosts.: Track hosts which
have been issued IP addresses
24. Which type of scan obtains information by authenticating to the host to
access resources not available over the network.: Credentialed
25. You may only select one import repository per scan.: True
26. Once a scan is running, you cannot pause or stop the scan until it has
completed running.: False
27. Which Port Scanning Range option tells the scanner to scan only common
ports?: default (of 4605 common ports)
28. In a low-bandwidth environment, which of the following options might you
adjust to try to improve scanning performance?: Max Simultaneous Checks Per
Host, Max Simultaneous Hosts Per Scan
29. What is the function of Performance Options in the Scan Policy?: Deter-
mines the impact of a scan related to scan times and network behavior
30. You can configure the targets for your Blackout Window to include which
of the following?: All Systems, Assets, IPs, Mixed
31. Which of the following Scan Policy types allows you to select Plugin
Families you want?: Custom Advanced Scan
32. Asset lists are dynamically or statically generated lists of hosts.: True
33. Which type of asset list updates automatically when a scan runs and a
repository is updated?: Dynamic
34. What is a static asset list?: A list of IP addresses that require user intervention
in order to change what defines them
35. What two ways can you use to add a dynamic asset list?: Use a template or
create a set of rules, Create a set of rules or a scan policy
36. When you create dynamic asset list(s), which of the following occurs?: Se-
curityCenter queries the repository(ies) to find assets that match the dynamic asset
list's rules.
This study source was downloaded by 100000899562851 from CourseHero.com on 06-11-2025 10:28:25 GMT -05:00
2/6
https://www.coursehero.com/file/249934617/ACAS-53-Coursepdf/
