Mod5 3a-3b-3c Review

The CCRI, or ____ is a ____ run inspection. (Select two)

Vulnerability... (Select all)

Systems affected, attack severity, and potential damage, are factors to consider during which stage?

The acronym PCAAM is best associated with:

Base CFP will alert NOS when non-client machines reach what percent?

Identifying, documenting, and publishing common controls available is an example of the System level of RMF Preparation.

is designed to support a faster pace of system updating and patch management for our network connected Windows devices.

Access to the DoDIN is not something given freely.

____ creates the patches, ___ tasks NOSs with normal remediation, and ___ send the updates to bases.

The CCRI Endpoint Security Compliance Worksheet will produce one of four overall ratings. These ratings are:

Emergency patching forgos all testing, and will be relased within __ hours.

A vulnerability is a _________

Identifies security vulnaerabilites in web applications and their source code by automated scans.

The ___ will direct NOS, NCCs/CFPs and PMOs to implement normal vulnerability remediation actions.

Tool that enhances availability and security of network. Includes scanner and reporting capabilities.

The root cause for a vulnerability was determined, and would have occured as part of the Vulnerability Analysis step.

___ may utilize patch-exempt groups to isolate systems from AFIN-wide patches and updates.

___ deters and denies adversarial actions by preventing the spread and execution of known malicious software.

Responsible for identifying information systems controlled by a Program Management Office within their respective AOR.

What is the second step of the Vulnerability Assessment Scanning Process?

Who is responsible for reporting and updating test and risk analysis to the AFCYBER Readiness Center?

DISA's CCRI component, "Culture", could evaluate... (Select all)

To be marked non-compliant on a CCRI question, all related indicators to that question must be non-compliant as well.

Real-time network monitor and component of ACAS.

The assessment of databases or big data systems for vulnerabilities and misconfigurations.

If eMASS automates the RMF process, which steps will it complete?

The ___ will direct tasking priority and emergency remediation actions to NOSs.

Systems affected, and attack severity are factors to consider during which stage?

Identifying types of information to be processesed, stored, and transmitted is a System level example of RMF Preparation

Mandatory deployments target all machines that require an update. They have a grace period of __ hours.