Questions

Here are a few questions to test your understanding of the chapter:

1. When performing a SCAP scan on a system, which of the following types of scans will be most useful?
   1. Credentialed
   2. Non-credentialed
   3. Agent-based
   4. Intrusive
2. What would be most important when monitoring security on ICS networks, where latency must be minimized?
   1. Group Policy
   2. Active scanning
   3. Passive scanning
   4. Continuous integration
3. What is the protocol that allows for the automation of security compliance scans?
   1. SCAP
   2. CVSS
   3. CVE
   4. ARF
4. What standard would support the creation of XML-format configuration templates?
   1. XCCDF
   2. CVE
   3. CPE
   4. NMAP
5. What standard allows a vulnerability scanner to detect the host operating system and installed applications?
   1. XCCDF
   2. CVE
   3. CPE
   4. SCAP
6. What standard supports a common reporting standard for vulnerability scanning?
   1. XCCDF
   2. CVE
   3. OVAL
   4. STIG
7. What information type can be found at MITRE and NIST NVD that describes a known vulnerability and gives information regarding remediation?
   1. CVE
   2. CPE
   3. CVSS
   4. OVAL
...