Tenable SC flashcards
Tenable SC · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- SecurityCenter
- Central Tenable application that aggregates vulnerability data from scanners, stores results in repositories, and provides dashboards, reports, and access control.
- Scanner appliance
- Tenable scan engine deployed remotely to reach target networks; it performs scans and reports results to the SecurityCenter.
- Organization
- Tenant boundary in SecurityCenter that separates assets, users, scans, repositories, dashboards, and reports from other organizations.
- Initial configuration order
- License, network and time settings, organizations, users and roles, scan zones, scanners, credentials, policies, repositories, then scans.
- Offline repository
- Repository that ingests exported scan result files instead of receiving live scanner traffic; useful for isolated networks or imported assessments.
- HTTPS administration
- SecurityCenter administrative web interface is accessed over HTTPS; restrict access to trusted management hosts and networks.
- Scan zone
- Logical grouping of scanners associated with a network segment; scans select a zone so target reachability matches scanner placement.
- Credentialed scan
- Scan that logs into targets with supplied credentials to perform local checks, yielding more accurate patch and configuration findings than remote probing alone.
- SMB credential
- Windows authentication used for credentialed scans; the account typically needs local administrative rights to read patch and configuration details.
- SSH credential
- Unix/Linux authentication for credentialed scans; use sudo or a least-privilege account allowed to read system and package state.
- SNMP credential
- Read-only SNMP community or SNMPv3 credential used to discover network devices and collect configuration information during scans.
- Plugin family
- Group of related Nessus checks in a scan policy; enabling or disabling the family controls which checks run.
- Safe checks
- Policy setting that avoids plugins known to be disruptive; disabling it allows potentially risky checks that can affect fragile systems.
- Scan performance settings
- Maximum hosts, maximum checks, and timeouts in a policy; they trade scan speed against thoroughness and target load.
- Asset list
- Named collection of assets used for scan targets, report and dashboard filters, and access-control scoping.
- Dynamic asset list
- Asset list populated by saved search filters in SecurityCenter; membership updates automatically as asset data changes.
- Static asset list
- Asset list populated by manually adding assets; membership changes only when an administrator edits the list.
- Repository
- Storage location for scan results and asset data; every scan must write to a repository permitted by the user's organization.
- Asset identity
- Rules using IP, DNS name, NetBIOS, MAC, and UUID to decide whether observations represent one asset or multiple assets.
- Asset tag
- Metadata label applied to assets for grouping by business function, location, or criticality; usable in filters and reports.
- Administrator role
- SecurityCenter role with system-wide control over organizations, users, scanners, repositories, and global configuration settings.
- Security Manager role
- Role that manages scans, policies, assets, and users within assigned organizations without necessarily controlling global system settings.
- Auditor role
- Read-only role for viewing scan results, assets, dashboards, and reports without changing scan or system configuration.
- Analyst role
- Role focused on analyzing vulnerability data, building dashboards, and producing reports from existing scan results.
- User group
- Collection of users used to assign roles and share access to objects such as asset lists, repositories, and reports.
- Organization role assignment
- A user's permissions are evaluated separately in each organization; the same account can hold different roles in different organizations.
- Dashboard widget
- Visual component that queries vulnerability or asset data; it inherits filters and scope from the dashboard containing it.
- Report template
- Reusable definition of report sections, filters, and formatting used to generate on-demand or scheduled reports.
- VPR
- Vulnerability Priority Rating that combines severity with exploitability and threat intelligence to rank findings for remediation.
- Accept risk rule
- Rule that marks matching findings as accepted for a period, removing them from active remediation queues while preserving audit history.
- Severity recast
- Administrative change to a plugin's severity for an organization, affecting how findings appear in dashboards and reports.
- Remediation verification
- Confirming a fix by rescanning or checking later results; a finding absent from a consistent later scan is treated as resolved.