Mbsa - Study guides, Class notes & Summaries

CompTIA CySA+ Questions and Answers 100% Correct What is SIEM? Security information and event management; centralized management of information and events regarding the devices on a network, including logs and other security-related documentation. What is SCAP? Security Content Automation Protocol (SCAP) allows an organization to use automated vulnerability management and security policy compliance metrics. What is Splunk? SIEM system What is Snort? IDS/IPS What is AlienVault? SIEM system W...

TESTOUT Security Pro Q &A VERIFIED Which of the following functions can a port scanner provide? -Determining which ports are open on a firewall -Discovering unadvertised servers Which of the following is the type of port scan that does not complete the full three-way TCP handshake, but rather listens only for either SYN/ACK or RST/ACK packets? You want to make sure that a set of servers will only accept traffic for specific network services. You have verified that the servers are only ...

PILAR correct answer: Risk analysis and Management tool Pilar correct answer: Assess risk against critical assets. Qualitative and quantitative. Generate risk assessment reports Group Policy Management console correct answer: Security policy Tools Manageengine ... plus correct answer: Ticketing system Tools Alien vault correct answer: Ticketing system Tools Busk-security correct answer: Incident analysis and validation Tools Busk-security correct answer: Collection of se...

Lab Assessment Questions 1. Why is it important to run the MBSA? According to Microsoft (n.d.), the Microsoft Baseline Security Analyzer provides a streamlined method to identify missing security updates and common security misconfigurations. It is important to run MBSA to ensure your system is up to date and secure. 2. What does an MBSA analysis look for? MBSA analysis tries to find missing security updates and less secured system settings (configurations) within Microsoft...

PILAR CORRECT ANSWER Risk analysis and Management tool Pilar CORRECT ANSWER Assess risk against critical assets. Qualitative and quantitative. Generate risk assessment reports Group Policy Management console CORRECT ANSWER Security Policy Tools Manage engine ... plus CORRECT ANSWER Ticketing System Tools Alien vault CORRECT ANSWER Ticketing System Tools Busk-security CORRECT ANSWER Incident analysis and validation Tools Busk-security CORRECT ANSWER Collection of security checks...

incident handling response steps correct answer: 1. Preparation 2. Incident Recording 3. Incident Triage 4. Notification 5. Containment 6. Evidence Gathering and Forensic Analysis 7. Eradication 8. Recovery 9. Post-Incident Activities- Incident Documentation- Incident Impact Assessment- Review and Revise Policies- Close the Investigation- Incident Disclosure Risk Assessment Management tools correct answer: PILAR - It helps incident handlers to assess risks against critical asse...