thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Advanced

Security Content Automation Protocol (SCAP)

A NIST suite of specifications for automating vulnerability management, measurement and compliance checking.

Definition

SCAP components include CVE, CVSS, CPE, CWE, CCE (configurations), OVAL (assessment language), XCCDF (checklists) and ARF (reporting). SCAP-validated scanners can consume standardized benchmarks such as DISA STIGs.

Example

Running an SCAP scan with a DISA STIG benchmark to check server configuration compliance.

Exam tip

SCAP enables interoperable, automated compliance scanning; know its main components.

Related terms