Vulnerability And scanners

Question 1

Security Content automation protocol (SCAP)

Answer 1

Allows compatible scanners to determine whether a comp meets configuration baseline.

-uses to accomplish this:
—OVAL
—XCCDF

Question 2

Open Vulnerability and Assessment Language (OVAL)

Answer 2

XML schema for describing system security state and querying vulnerability reports.

Used by SCAP

Question 3

Extensible Configuration Checklist Description Format (XCCDF)

Answer 3

XML schema for developing and auditing best-practice configuration checklists and rules.

Uses machine readable format to apply best practices instead of needing to do it manually like previously.

Used by SCAP

Question 4

Weak Host Configuration

Answer 4

Default settings
Unsecured root accounts
Open permissions
Open ports and services
Unsecure protocols
Weak encryption
Errors