Mod 5-Class 016

The DoD utilizes an application called eMASS to support Information Assurance and automate the_______

............ is a physical or logical subnetwork containing an organization's exposed, external-facing services.

contain programs, software, updates and even operating system images for client downloads.

What is an automated system that monitors and analyzes network traffic and generates “Alerts” in response

Technique used to control net access by monitoring incoming/outgoing data. Allowing or blocking them.

IDS stands for

utilized to protect the endpoint from unauthorized device insertions

 It involves the identification of system components responsible foreach vulnerability, and the root cause of the vuln

enables a Local Area Network to use one set of IP addresses for internal traffic and a second set for external traffic.

This tool scans at the enterprise network level and provides real-time detection of network anomalies.

Java-based application that is used in conjunction with the SCAP

What are the overall Purposes of ESS

The older version of Microsoft Endpoint Configuration Manager

The objective of this step is to draft a comprehensive list of an application’svulnerabilities.

Management Point Role provides the ability to create and manage reports.

This term refers to a connection of ongoing data exchange between two parties.

Administrators should maintain the security of the IDS components on an ongoing basis.

Which of the following is not a capability of IDS?

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

SolarWinds Security Event Manager (SEM)

One goal of the CCRI is to ensure that the proper security controls and processes are in place. What it this called.

The monitoring and control of communications at the external boundary of an information system

monitoring and control of comm at the external boundary of an info system to prevent/detect malicious comm

task NOSs with Priority and Emergency vulnerability remediation actions

responsible for monitoring client health and assisting the NOSs with remediation of vulnerabilities

What are the components of TLS

The purpose of this is to enhance the security posture of DoD endpoints

open-source, multi-platform, and lightweight IDS designed to be comprehensive and accurate in logging malicious activity

What tool would you use to conduct a manual audit of your system's compliance with DISA STIGs?

Select all of the following application security processes.

automated stig compliance scanning tool

First identifies normal operation or normal behavior by creating a performance baseline under normal operating condition

The objective of this step is the prioritizing of vulnerabilities

Which of the following are boundary interaction best practices.

Tier 1 of MECM Consists of Primary Sites that house the MECM database

What intrusion control type is specific to a host and prevents the intrusion?

What is the point where data transfers from the intranet to the internet and vice-versa?

Is responsible for maintaining the security posture of the Department of Defense Information Network

CCRI is a squadron led inspection that occurs normally every 3 years

An open-source, multi-platform, and lightweight IDS?

Proxy server acts as a mediator (proxy) between a client and an external server filtering requests in order.

A firewall can be a software or hardware solution.

Attack that involves someone intercepting data being sent between two parties.

What are the 4 purposes of Patch Management?

responsible for remediating assets that are supported by a weapons system or program management office.

describes how to minimize network-based attacks and prevent system access

Tier 2 : Consists of Primary Sites that house the MECM database, and distribute global data between them.

This monitors the identification of session users ensuring only authorized users may access the session.

provide ESS configurations, updates, and Master Source Repository.

Organizations should understand what it would take to break the system or network’s security features.

a network device or software acting on behalf of clients to retrieve requested content from the internet.

What sends real-time reports to the Security Center?

Automatically identifies configuration vulnerabilities threatening the security of the DoD’s computer systems

are required to populate NOS patch testing groups with at least 3% of the base's total assets

What aims to reduce the risk on systems and applications due to out-of-date code bases?

ESS Tier Scructure: Tier 1

What is a continuous process of identifying, prioritizing, remediating, and reporting on security vulnerabilities in sys

What is a software/hardware network security system controlling incoming and outgoing network traffic?

Use a database of known vulnerabilities or attack patterns.

How many steps are there in the Patch Management process?

This Detection is effective at discovering zero-day exploits.

creates pre-configured operating system images that are compliant with all applicable TCNOs and STIGs.

Directs Nos,NCCs, and PMOs to implement normal vuln remediation.

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

DISA's CCRI component, "Culture", could evaluate... (Select all)

IDS prevents intrusions by stopping them.

What is essential when securing a server?

The ______ is the backbone of the ESS suite for the client

Once the 95% threshold is met by the NOS the remaining 5% are the responsibility of

An IDS is an appliance for enhanced network security providing detection and prevention of threats.

Security Center provides real-time detection of network anomalies and is scalable

Analyzes code at fixed points in development

a platform used by the Air Force to monitor and maintain the thousands of systems across the Air Force Network.

Designed to support a faster pace of system updating and patch management for our network connected windows devices

What provides boundary protection for the high-value systems in addition to enterprise level protections?

What is a type of code that is inserted into the code of an existing program?

A flaw or weakness in a system.