Tenable SC study guide
Tenable SC · Work through your exam, one topic at a time.
Tenable Security Center (often shortened to Tenable SC) is Tenable's on-premises platform for identifying and prioritizing vulnerabilities based on risk to the business. Tenable describes it as a solution managed on premises, which distinguishes it from the vendor's cloud-delivered offerings. This certification is aimed at security engineers, vulnerability management analysts, and platform administrators who deploy, configure, and operate Security Center day to day, as well as consultants who build and tune scanning programs for clients. Candidates should already be comfortable with vulnerability management concepts, network scanning workflows, and general enterprise security operations before attempting the exam. The Tenable SC study guide has 5 sections and about 1,707 words.
01Deployment, Architecture, and Initial Configuration
Tenable SC (formerly SecurityCenter) is a management server plus one or more Nessus scanners. Optional components - Log Correlation Engine (LCE) for log/event correlation and Nessus Network Monitor (NNM, formerly the Passive Vulnerability Scanner) for traffic analysis - enrich but never replace active scanning.
360 words, about 2 min02Scan Policies, Scan Zones, and Credentialed Scanning
A scan policy is a template plus plugin families, scan settings, and credentials. Templates (Basic/Advanced Network Scan, Host Discovery, Malware, Web Application, and compliance templates such as PCI DSS or DISA STIG) pre-set plugin families that you narrow or widen.
348 words, about 2 min03Asset Management, Repositories, and Asset Lists
Repositories store raw scan results and are the unit of analysis in SC. Results are scoped to a repository, so a report or analysis naming the wrong repository returns nothing useful.
330 words, about 2 min04User Roles, Access Control, and Organizational Structure
Organizations sit at the top of the tenancy model. Repositories, scan zones, credentials, asset lists, dashboards, and reports all belong to an organization, and a user's role is granted per organization.
330 words, about 2 min05Dashboards, Reporting, and Vulnerability Prioritization
Dashboards are collections of components (matrices, charts, tables, vulnerability detail) driven by saved analysis filters: repository, asset list, severity, VPR, and time range. Each component refreshes on its own interval, so a dashboard can look stale without being wrong.
339 words, about 2 min