Mod5 3a-3b-3c Review

Question 1

Identifying types of information to be processesed, stored, and transmitted is a System level example of RMF Preparation

Accepted Answer

True

Question 2

Identifies security vulnaerabilites in web applications and their source code by automated scans.

Accepted Answer

Application scans

Question 3

Vulnerability... (Select all)

Accepted Answer

Identification, Analysis, Risk Assessment, Remediation

Question 4

Emergency patching forgos all testing, and will be relased within __ hours.

Accepted Answer

24

Question 5

The acronym PCAAM is best associated with:

Accepted Answer

The RMF process

Question 6

___ deters and denies adversarial actions by preventing the spread and execution of known malicious software.

Accepted Answer

ESS

Question 7

What is the second step of the Vulnerability Assessment Scanning Process?

Accepted Answer

Analysis

Question 8

___ may utilize patch-exempt groups to isolate systems from AFIN-wide patches and updates.

Accepted Answer

PMO

Question 9

Real-time network monitor and component of ACAS.

Accepted Answer

PVS

Question 10

The ___ will direct NOS, NCCs/CFPs and PMOs to implement normal vulnerability remediation actions.

Accepted Answer

690 NSS

Question 11

Responsible for identifying information systems controlled by a Program Management Office within their respective AOR.

Accepted Answer

CFP

Question 12

____ creates the patches, ___ tasks NOSs with normal remediation, and ___ send the updates to bases.

Accepted Answer

AFECMO, 690 NSS, VRO

Question 13

is designed to support a faster pace of system updating and patch management for our network connected Windows devices.

Accepted Answer

MECM

Question 14

The CCRI, or ____ is a ____ run inspection. (Select two)

Accepted Answer

DISA, Command Cyber Readiness Inspection

Question 15

Base CFP will alert NOS when non-client machines reach what percent?

Accepted Answer

10

Question 16

To be marked non-compliant on a CCRI question, all related indicators to that question must be non-compliant as well.

Accepted Answer

False

Question 17

Mandatory deployments target all machines that require an update. They have a grace period of __ hours.

Accepted Answer

4

Question 18

Tool that enhances availability and security of network. Includes scanner and reporting capabilities.

Accepted Answer

ACAS

Question 19

Who is responsible for reporting and updating test and risk analysis to the AFCYBER Readiness Center?

Accepted Answer

AFECMO

Question 20

Identifying, documenting, and publishing common controls available is an example of the System level of RMF Preparation.

Accepted Answer

False

Question 21

If eMASS automates the RMF process, which steps will it complete?

Accepted Answer

Categorize, Prepare, Authorize, Assess, Monitor

Question 22

The CCRI Endpoint Security Compliance Worksheet will produce one of four overall ratings. These ratings are:

Accepted Answer

Compliant, Partial, Non-Compliant, Not Applicable

Question 23

Access to the DoDIN is not something given freely.

Accepted Answer

True, and each base must periodically earn rights to operate on the DODIN.

Question 24

The ___ will direct tasking priority and emergency remediation actions to NOSs.

Accepted Answer

616 OC

Question 25

A vulnerability is a _________

Accepted Answer

Flaw, or weakness in a system

Question 26

Systems affected, attack severity, and potential damage, are factors to consider during which stage?

Accepted Answer

Risk Assessment

Question 27

DISA's CCRI component, "Culture", could evaluate... (Select all)

Accepted Answer

Leadership's engagement in cybersecurity program, Plan Of Actions & Milestones (POA&Ms)

Question 28

The root cause for a vulnerability was determined, and would have occured as part of the Vulnerability Analysis step.

Accepted Answer

True

Question 29

The assessment of databases or big data systems for vulnerabilities and misconfigurations.

Accepted Answer

Database Assessment

Question 30

Systems affected, and attack severity are factors to consider during which stage?

Accepted Answer

Risk Assessment

Mod5 3a-3b-3c Review

Questions 30

Mod5 3a-3b-3c Review

Questions 30