ACAS Exam – Questions & Verified Solutions The ACAS product suite is Correct Ans - a commercial-off-the-shelf solution from Tenable Network Security, which can detect known Cyberthreats to Air Force enterprise assets.Agent-less Scalable Solution Network Discovery Compliance Reporting Why is ACAS Important? Correct Ans - --The only DISA approved Vulnerability Scanning tool --USCYBERCOM Tasking Order 17- 0019 - Assured Compliance Assessment Solution (ACAS) Operational Guidance --Identifies a wide variety of vulnerabilities for your base --Identifies computers, servers, printers, switches, routers and IP phones on your base --Allows for a graphical view of your vulnerabilities for leadership
ACAS Components Correct Ans - --ACAS components:
Tenable SecurityCenter Nessus Scanners --One SecurityCenter per MAJCOM and two Nessus Scanners per site --Each Nessus Scanner can handle a Maximum of 2500 IPs --Nessus scanners can be physical or virtual What is an Organization? Correct Ans - --Primary object within SecurityCenter used to group users and assign resources and permissions --Air Force Organizations are grouped by base location Ex. Ramstein Organization, Langley Organization Scan Zones Correct Ans - --Defines the IP ranges associated with the scanner along with organizational access --SecurityCenter allows defined Organizations to be configured with two
different scan zone modes: "selectable" and "forced"
Network Address Declaration Form (NAD) Correct Ans - --Form filled out by base comm squadrons that lays out all IP addresses within their Communications Circuit System Designator (CCSD) 1 / 2
--Official document for appointment letters for VAT (Vulnerability Assessment Technician) --NOT Classified Secret when filled out IAW DISA Circular 300-115-3 DISN SIPRNet Security Classification Guide --Submit via SIPR Remedy ticket assigned to the "AFNET EITSM > CSCS > Vulnerability Assessment" queue --Minimum once every six months What is a Repository Correct Ans - A database of vulnerability data defined by one or more ranges of IP addresses or mobile data types.SecurityCenter integrates Correct Ans - repositories of vulnerability data that are shared as needed among users and organizations based on manager-defined assets.
The NOS/COS have created each base each of the following repositories:
Correct Ans - >Credentialed Scan Data >Non-Credentialed Scan Data >Compliance Scan Data The blackout window in SecurityCenter Correct Ans - >>specifies a timeframe where new scans are prohibited from launching >>Prevents remediation or ad-hoc scans from being performed during timeframes when they are not desired, such as production hours !! Warning - Current running scans are stopped at the beginning of the blackout window period Blackout windows are set Correct Ans - using the Organization account at the base by the servicing NOS/COS.ACAS Limitations Correct Ans - >>ACAS CANNOT apply patches or alter configuration settings, only reports scan findings >>Too many concurrent tasks can overload/lock database and cease functions >>Nessus scanners require base technicians to troubleshoot and perform regular touch maintenance in correlation with AFLCMC/PMO.
- / 2