ACAS Best Practice Knowledge Exam
1,2,3,4,5, & 6 | Assured Compliance
Assessment Solution (ACAS EXAM
1,2,3,4,5,6) | Exam 2024/2025
A vulnerability will be marked as mitigated in the Tenable.sc repository if a
subsequent scan determines that the vulnerability is no longer present on
the endpoint.
Select the correct answer.
a. True
b. False
- Correct Answer - a
Select the best answer.
a. Active Scan View
b. Vulnerability Summary
c. IP Summary
d. Remediation Summary - Correct Answer - c
Nessus Agents are lightweight Nessus scanners installed on the endpoint,
according to the ACAS Agent Rapid Deployment Guide.
Select the best answer.
a. True
b. False
,- Correct Answer - a
Per the Best Practices Guide, which of the following statements are true?
Select the correct answer(s).
a. The TASKORD defines several target types on which Nessus Agents are
required to be installed.
b. Nessus Agents can be installed on addition endpoints above TASKORD
requirement.
c. Per the TASKORD organizations endpoints which leverage a Nessus
Agents must also be scanned with the Nessus active scanner using ACAS
Best Practice Guide Agent Differential scan policy.
d. If you use Nessus Agents, then you don't need any other scanning tools
for ACAS.
e. All the above
- Correct Answer - a b c
Nessus Agent and Manager use the same software.
Select the correct answer.
a. True
b. False
- Correct Answer - b
Per the Best Practices Guide, which of these statements is true.
Select the correct answers.
a. ACAS TASKORD 20-0020 FRAGO 3 clarifies that only DISA STIG
Tenable Audit files are to be used for configuration scanning in ACAS.
, b. DISA SCAP-compliant, automated benchmarks are still acceptable for
ingest into CMRS.
c. Audit files are proprietary formatted XML files that define how ACAS
should check for configuration with a specified benchmark.
d. Tenable distributes audit files via the the Tenable.sc Feed that is used to
update Tenable.sc
e. None of the above
- Correct Answer - a c d
It has been 20 days since your last configuration (STIG) scan. Per FRAGO
2 of the Task Order 20-0020, which of the following statements reflects your
current compliance status?
Select the best answer.
In compliance because configuration scans are only required every 30
days.
In compliance because vulnerability scans are only required every 21 days.
Out of compliance because configuration scans are required every 14
days.
Out of compliance because vulnerability scans are required every single
day.
- Correct Answer - a
Choose the Tenable.sc Severity Level that corresponds to the
Configuration result.
Tenable re-used severity levels for configuration results.
To answer the question, drag the definition to the appropriate severity
below.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller NurseMeg. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.99. You're not tied to anything after your purchase.
