Mod 5-Class 016

Automatically identifies configuration vulnerabilities threatening the security of the DoD’s computer systems

The objective of this step is the prioritizing of vulnerabilities

responsible for monitoring client health and assisting the NOSs with remediation of vulnerabilities

Which of the following is not a capability of IDS?

What aims to reduce the risk on systems and applications due to out-of-date code bases?

Once the 95% threshold is met by the NOS the remaining 5% are the responsibility of

What is essential when securing a server?

Administrators should maintain the security of the IDS components on an ongoing basis.

IDS stands for

Organizations should understand what it would take to break the system or network’s security features.

Directs Nos,NCCs, and PMOs to implement normal vuln remediation.

The monitoring and control of communications at the external boundary of an information system

The purpose of this is to enhance the security posture of DoD endpoints

a platform used by the Air Force to monitor and maintain the thousands of systems across the Air Force Network.

task NOSs with Priority and Emergency vulnerability remediation actions

Analyzes code at fixed points in development

DISA's CCRI component, "Culture", could evaluate... (Select all)

Proxy server acts as a mediator (proxy) between a client and an external server filtering requests in order.

This tool scans at the enterprise network level and provides real-time detection of network anomalies.

IDS prevents intrusions by stopping them.

Which of the following are boundary interaction best practices.

Technique used to control net access by monitoring incoming/outgoing data. Allowing or blocking them.

The ______ is the backbone of the ESS suite for the client

A firewall can be a software or hardware solution.

Attack that involves someone intercepting data being sent between two parties.

utilized to protect the endpoint from unauthorized device insertions

The older version of Microsoft Endpoint Configuration Manager

monitoring and control of comm at the external boundary of an info system to prevent/detect malicious comm

One goal of the CCRI is to ensure that the proper security controls and processes are in place. What it this called.

Management Point Role provides the ability to create and manage reports.

provide ESS configurations, updates, and Master Source Repository.

Designed to support a faster pace of system updating and patch management for our network connected windows devices

This monitors the identification of session users ensuring only authorized users may access the session.

The objective of this step is to draft a comprehensive list of an application’svulnerabilities.

............ is a physical or logical subnetwork containing an organization's exposed, external-facing services.

A flaw or weakness in a system.

What is a software/hardware network security system controlling incoming and outgoing network traffic?

open-source, multi-platform, and lightweight IDS designed to be comprehensive and accurate in logging malicious activity

automated stig compliance scanning tool

What is a type of code that is inserted into the code of an existing program?

CCRI is a squadron led inspection that occurs normally every 3 years

What is a continuous process of identifying, prioritizing, remediating, and reporting on security vulnerabilities in sys

contain programs, software, updates and even operating system images for client downloads.

What sends real-time reports to the Security Center?

First identifies normal operation or normal behavior by creating a performance baseline under normal operating condition

Security Center provides real-time detection of network anomalies and is scalable

creates pre-configured operating system images that are compliant with all applicable TCNOs and STIGs.

What intrusion control type is specific to a host and prevents the intrusion?

 It involves the identification of system components responsible foreach vulnerability, and the root cause of the vuln

responsible for remediating assets that are supported by a weapons system or program management office.

This Detection is effective at discovering zero-day exploits.

describes how to minimize network-based attacks and prevent system access

An IDS is an appliance for enhanced network security providing detection and prevention of threats.

How many steps are there in the Patch Management process?

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

ESS Tier Scructure: Tier 1

Java-based application that is used in conjunction with the SCAP

Tier 1 of MECM Consists of Primary Sites that house the MECM database

What is the point where data transfers from the intranet to the internet and vice-versa?

What is an automated system that monitors and analyzes network traffic and generates “Alerts” in response

SolarWinds Security Event Manager (SEM)

What are the 4 purposes of Patch Management?

What tool would you use to conduct a manual audit of your system's compliance with DISA STIGs?

Tier 2 : Consists of Primary Sites that house the MECM database, and distribute global data between them.

enables a Local Area Network to use one set of IP addresses for internal traffic and a second set for external traffic.

Is responsible for maintaining the security posture of the Department of Defense Information Network

What are the overall Purposes of ESS

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

a network device or software acting on behalf of clients to retrieve requested content from the internet.

An open-source, multi-platform, and lightweight IDS?

The DoD utilizes an application called eMASS to support Information Assurance and automate the_______

Use a database of known vulnerabilities or attack patterns.

What provides boundary protection for the high-value systems in addition to enterprise level protections?

Select all of the following application security processes.

What are the components of TLS

This term refers to a connection of ongoing data exchange between two parties.

are required to populate NOS patch testing groups with at least 3% of the base's total assets