Mod 5-Class 016

An open-source, multi-platform, and lightweight IDS?

CCRI is a squadron led inspection that occurs normally every 3 years

How many steps are there in the Patch Management process?

What sends real-time reports to the Security Center?

Attack that involves someone intercepting data being sent between two parties.

............ is a physical or logical subnetwork containing an organization's exposed, external-facing services.

SolarWinds Security Event Manager (SEM)

What tool would you use to conduct a manual audit of your system's compliance with DISA STIGs?

Automatically identifies configuration vulnerabilities threatening the security of the DoD’s computer systems

Is responsible for maintaining the security posture of the Department of Defense Information Network

responsible for monitoring client health and assisting the NOSs with remediation of vulnerabilities

Tier 1 of MECM Consists of Primary Sites that house the MECM database

Organizations should understand what it would take to break the system or network’s security features.

What is a type of code that is inserted into the code of an existing program?

describes how to minimize network-based attacks and prevent system access

What is essential when securing a server?

Java-based application that is used in conjunction with the SCAP

monitoring and control of comm at the external boundary of an info system to prevent/detect malicious comm

DISA's CCRI component, "Culture", could evaluate... (Select all)

Tier 2 : Consists of Primary Sites that house the MECM database, and distribute global data between them.

A flaw or weakness in a system.

creates pre-configured operating system images that are compliant with all applicable TCNOs and STIGs.

The monitoring and control of communications at the external boundary of an information system

The DoD utilizes an application called eMASS to support Information Assurance and automate the_______

are required to populate NOS patch testing groups with at least 3% of the base's total assets

The objective of this step is to draft a comprehensive list of an application’svulnerabilities.

Directs Nos,NCCs, and PMOs to implement normal vuln remediation.

This tool scans at the enterprise network level and provides real-time detection of network anomalies.

The purpose of this is to enhance the security posture of DoD endpoints

a network device or software acting on behalf of clients to retrieve requested content from the internet.

Security Center provides real-time detection of network anomalies and is scalable

IDS prevents intrusions by stopping them.

What intrusion control type is specific to a host and prevents the intrusion?

provide ESS configurations, updates, and Master Source Repository.

Which of the following are boundary interaction best practices.

automated stig compliance scanning tool

What are the overall Purposes of ESS

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

Select all of the following application security processes.

IDS stands for

Designed to support a faster pace of system updating and patch management for our network connected windows devices

a platform used by the Air Force to monitor and maintain the thousands of systems across the Air Force Network.

Snort is a a unix-based NIDS that passively monitors traffic and detects intrusions

What are the components of TLS

contain programs, software, updates and even operating system images for client downloads.

What provides boundary protection for the high-value systems in addition to enterprise level protections?

Once the 95% threshold is met by the NOS the remaining 5% are the responsibility of

The ______ is the backbone of the ESS suite for the client

An IDS is an appliance for enhanced network security providing detection and prevention of threats.

First identifies normal operation or normal behavior by creating a performance baseline under normal operating condition

ESS Tier Scructure: Tier 1

task NOSs with Priority and Emergency vulnerability remediation actions

What is an automated system that monitors and analyzes network traffic and generates “Alerts” in response

The older version of Microsoft Endpoint Configuration Manager

Proxy server acts as a mediator (proxy) between a client and an external server filtering requests in order.

This term refers to a connection of ongoing data exchange between two parties.

enables a Local Area Network to use one set of IP addresses for internal traffic and a second set for external traffic.

open-source, multi-platform, and lightweight IDS designed to be comprehensive and accurate in logging malicious activity

What is the point where data transfers from the intranet to the internet and vice-versa?

Analyzes code at fixed points in development

One goal of the CCRI is to ensure that the proper security controls and processes are in place. What it this called.

This monitors the identification of session users ensuring only authorized users may access the session.

The objective of this step is the prioritizing of vulnerabilities

 It involves the identification of system components responsible foreach vulnerability, and the root cause of the vuln

Technique used to control net access by monitoring incoming/outgoing data. Allowing or blocking them.

utilized to protect the endpoint from unauthorized device insertions

What aims to reduce the risk on systems and applications due to out-of-date code bases?

What is a software/hardware network security system controlling incoming and outgoing network traffic?

Which of the following is not a capability of IDS?

Administrators should maintain the security of the IDS components on an ongoing basis.

What are the 4 purposes of Patch Management?

A firewall can be a software or hardware solution.

This Detection is effective at discovering zero-day exploits.

Management Point Role provides the ability to create and manage reports.

What is a continuous process of identifying, prioritizing, remediating, and reporting on security vulnerabilities in sys

Use a database of known vulnerabilities or attack patterns.

responsible for remediating assets that are supported by a weapons system or program management office.