Tenable SC case studies
Tenable SC · Put your knowledge to work in context.
Tenable Security Center (often shortened to Tenable SC) is Tenable's on-premises platform for identifying and prioritizing vulnerabilities based on risk to the business. Tenable describes it as a solution managed on premises, which distinguishes it from the vendor's cloud-delivered offerings. This certification is aimed at security engineers, vulnerability management analysts, and platform administrators who deploy, configure, and operate Security Center day to day, as well as consultants who build and tune scanning programs for clients. Candidates should already be comfortable with vulnerability management concepts, network scanning workflows, and general enterprise security operations before attempting the exam. The Tenable SC case studies are 5 cases and about 3,652 words.
1Three sites, one unseen subnet, and a NAT in the middle
Northwind runs Tenable SC in HQ. Four Nessus scanners are registered: two in HQ (10.10.0.0/16), one in a DMZ segment (172.16.4.0/24), and one at a branch office (192.168.20.0/24).
759 words, about 4 min2The fourteen-hour scan that still misses a quarter of the estate
A single policy, "Internal Full", is used against 10.20.0.0/20 - about 4,094 addresses. It enables every plugin family, sets max concurrent checks per host to 5, host timeout to 300 seconds, and uses the default ping settings.
727 words, about 4 min3Five hundred servers, sixty of them moving
A server team sends a spreadsheet of 500 production servers, which is loaded as a static asset list and used as the scan target for a weekly job. Sixty of those servers are DHCP and change address every few weeks; the spreadsheet is refreshed quarterly at best.
709 words, about 4 min4Three business units, six users, one platform
A holding company runs one Tenable SC instance for three business units. BU-A owns 2,000 IPs in 10.30.0.0/16, BU-B owns 900 IPs in 10.40.0.0/16, and BU-C is a joint venture with 300 IPs in 10.50.0.0/24.
703 words, about 4 min5Twelve thousand criticals and two audiences
A retailer's SC instance holds roughly 180,000 open vulnerability instances, of which 12,000 are rated Critical. The CISO wants a one-page monthly PDF with trends.
754 words, about 4 min