5-3

In this process, a team or an automated software determines which tools need patches and when fixes need to be made.

Who is responsible for maintaining the security posture of the Department of Defense Information Network (DoDIN).

___ is a DoD info sys used to record, track, and disseminate critical vulnerability info throughout the DoD network.

____ is a platform used by the Air Force to monitor and maintain the thousands of systems across the Air Force Network.

The NOS is responsible for patching vulnerabilities with a goal of 85% compliance of vulnerability remediation actions

Provides real-time monitoring looking for new hosts, apps vulnerabilities without requiring the need for active scanning

_____ deployments target all machines that require an update, are not a part of an exemption

___ will execute vulnerability remediation to reduce AFIN risk through the implementation of approved countermeasures.

___ is/are considered netflow tools

The CCRI is a pass or fail inspection over multiple categories.

___ is a Java-based application that is used in conjunction with the SCAP Compliance Checker

AFECMO has 2 days after an IAVM is published regarding cumulative Microsoft patches

_____ creates pre-configured operating system images that are compliant with all applicable TCNOs and STIGs.

VROs will forgo all testing of patches under this catagorey

Under this category VROs have 48 hrs to test patches and 24hrs to deploy them to 80% of machines

___ will manage vulnerabilities identified on devices that cannot be managed by NOSs (i.e., non-clients)

___ a flaw or weakness in system security procedures, design, implementation, or internal controls

Patch management aims to reduce the risk on systems and applications due to out-of-date code bases.

AFECMO has 1 day to test patches after a new TCNO ispublished

__ is a DISA formal inspection designed toincrease the security posture of DoD Information Networks according toDoD stds

____ deployments target all systems unless stated otherwise by the tasking authority. These are not mandatory.

___ is a flexible, commercial-off-the-shelf based application to enhance the security posture of operational networks

The goal of the vulnerability remediation/mitigation process is to mitigate the risks associated with vulnerabilities

(SCAP) Security Content Automation Protocol is used to check compliance of DoD systems

patch management” & “vulnerability management” are interchangeable

___ automatically identifies configuration vulnerabilities threatening the security of the DoD's computer systems.

____ task NOSs with Priority and Emergency vulnerability remediation actions, as well as direct actions for the NOSs

This squadron will authorize the testing of software and OS updates and ensure compliance goals have be achieved

___ are the configuration standards for DOD IA and IA enabled devices/systems.

616 OS has 24 hours, to get 70% of machines patched with remediation clients installed within 72 hours

CCRIs will be held periodically, typically every three years.

___ are responsible for remediating assets that are supported by a weapons system or program management office.

READ over 5e