Annex
D:
Part
III
-
Assured
Compliance
Assessment
Solution
(ACAS)
________________
only
scans
for
and
reports
on
automated
checks
-
ANS-ACAS
________________
only
scans
for
and
reports
on
automated
checks
-
ANS-ACAS
__________________
are
text
files
that
contain
the
specific
configuration,
file
permission,
and
access
control
tests
to
be
performed.
-
ANS-Audit
Files
__________________
are
text
files
that
contain
the
specific
configuration,
file
permission,
and
access
control
tests
to
be
performed.
-
ANS-Audit
Files
____________________
is
retained
according
to
administrator-defined
expiration
settings
-
ANS-Scan
Data
____________________
is
retained
according
to
administrator-defined
expiration
settings
-
ANS-Scan
Data
_____________________
are
proprietary
data
files,
residing
on
the
security
center,
that
store
scan
results
-
ANS-Repositories
_____________________
are
proprietary
data
files,
residing
on
the
security
center,
that
store
scan
results
-
ANS-Repositories
_______________________
contain
IP
address
and
vulnerability
information
obtained
via
network
synchronization
with
a
second
(remote)
Security
Center
-
ANS-Remote
Repositories
_______________________
contain
IP
address
and
vulnerability
information
obtained
via
network
synchronization
with
a
second
(remote)
Security
Center
-
ANS-Remote
Repositories
___________________are
active
repositories
of
Security
Center
data
collected
via
scanners
attached
to
the
local
Security
Center
-
ANS-Local
repositories
___________________are
active
repositories
of
Security
Center
data
collected
via
scanners
attached
to
the
local
Security
Center
-
ANS-Local
repositories
___________________enable
Security
Center
to
obtain
repository
data
via
manual
file
export/import
from
a
remote
Security
Center
that
is
not
network-accessible
-
ANS-Office
Repositories ___________________enable
Security
Center
to
obtain
repository
data
via
manual
file
export/import
from
a
remote
Security
Center
that
is
not
network-accessible
-
ANS-Office
Repositories
____________,
______________,
and
____________
are
the
three
types
of
repositories
-
ANS-Local,
Remote,
and
Offline
____________,
______________,
and
____________
are
the
three
types
of
repositories
-
ANS-Local,
Remote,
and
Offline
A
repository
has_________
a
GB
limit
and
is
not
organization
specific.
-
ANS-32
A
repository
has_________
a
GB
limit
and
is
not
organization
specific.
-
ANS-32
ACAS
Repositories
-
ANS-1.
Local
2.
Remote
3.
Offline
ACAS
Repositories
-
ANS-1.
Local
2.
Remote
3.
Offline
Access
to
a
repository
is
controlled
by:
-
ANS-The
administrator
Access
to
a
repository
is
controlled
by:
-
ANS-The
administrator
Compliance
-
ANS-DISA
will
generate
the
STIGs
based
on
secure
recommendations
from
software
vendors.
Then
the
STIG
configuration
settings
are
converted
to
SCAP
content,
imported
into
Security
Center,
and
used
by
Nessus
Scanners
to
audit
asset
configurations
for
compliance
Compliance
-
ANS-DISA
will
generate
the
STIGs
based
on
secure
recommendations
from
software
vendors.
Then
the
STIG
configuration
settings
are
converted
to
SCAP
content,
imported
into
Security
Center,
and
used
by
Nessus
Scanners
to
audit
asset
configurations
for
compliance
Defining
Audit
Files
-
ANS--text
files
that
contain
the
specific
configuration
-file
permission
-access
control
tests
to
be
performed.
come
from:
1)
Tenable
network
security
templates
(SC
5)
2)
DISA
STIG
automated
benchmarks
(.zip)
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller AnswersCOM. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
