Qualys Training Exams
Qualys Training Exams
4. Cloud Agent
5. Scanner Appliance
6. Passive Sensor
7. Cloud Connector
8. SubmitCancel
Scanner Appliance
Which of the following best describes a “Dynamic” Search List?
Choose an answer:
Manually updated – Static List
Updates can be scheduled regularly
Automatically updated
Option Profiles
What is the name given to a custom list of QIDs taken from the Qualys KnowledgeBase?
Choose an answer:
Search List
Asset Group
Authentication Record
Host Assets
To enumerate installed software applications on targeted hosts, scans should be
performed in __________ mode.
Choose an answer:
Unauthenticated
Authenticated
Authoratative
Verbose
Which of the following modules are regular components of the vulnerability scanning
process? (choose 3)
Choose all that apply:
OS Detection
Port Scanning
Host Discovery
Packet Sniffing
VLAN Tagging
To produce a "trend" report that covers the last twelve months of vulnerability activity,
you should select ______ Based Findings in the Scan Report Template.
Choose all that apply:
Scan
Client
Host
Server
You have just created a KnowledgeBase Search List. Where can you use or
apply it? (choose 3)
Choose all that apply:
In a Remediation Policy
In an Asset Group
In an Option Profile
In a Report Template
In a Business Unit
In an Asset Tag
SubmitCancel
Agent data (data collected by a Qualys Agent) is stored as ______ Based Findings.
Choose an answer:
Host
Scan
Client
Server
What phase or step of the Qualys Vulnerability Management Lifecycle, produces scan
results containing vulnerability findings?
Choose an answer:
Report
Discover
Remediate
Assess
One of your colleagues would like to build a report to display vulnerability findings over
the last three months (including trending information)? What do you recommend?
Choose an answer:
Build a scan template with the "All" Asset Group as its target.
Build a scan template that uses Host Based Findings.
Build a scan template that sorts findings by Asset Group
Internal Scanner
Why is it beneficial to configure the Business Impact of an Asset Group?
Choose an answer:
It's used to calculate storage space
It's used to calculate Severity Levels.
It's used to calculate CVSS Scores.
Asset Group
To achieve the most accurate OS detection results, scans should be performed in
__________ mode.
Choose an answer:
Verbose
Unauthenticated
Authoratative
Authenticated
Which of the following are required, to perform an “authenticated” scan that only
targets “severity 5” vulnerabilities? (choose all that apply)
Choose all that apply:
Scanner appliance
Target Hosts
Authentication Record
Search List (severity 5 QIDs)
Option Profile
Unit Manager
To produce a vulnerability report containing the results from a specific and distinct scan,
you should select ______ Based Findings in the Scan Report Template.
Choose an answer:
Scan
Client
Server
Host
One of your "Scanner" users would like to perform a comprehensive scan (occasionally)
that targets the maximum number of service ports. Which port scanning option do you
recommend?
Choose an answer:
None
Standard Scan
Light Scan
Full
What is the default number of “Host Discovery” TCP ports?
Choose an answer:
13
1900
180
20
Which of the following is the default tracking method used by Qualys Cloud Agents?
Choose an answer:
Qualys Host ID
IP Address
NetBIOS Name
DNS Name
Which module does a Qualys Scanner Appliance load to determine the LIVE/DEAD status
of targeted hosts?
Choose an answer:
OS Detection
Service Detection
Port Scanning
Host Discovery
Which of the following criteria can be used to create a dynamic Search List? (choose 3).
Choose all that apply:
IP Address
Host Name
CVE ID
CVSS Score
Severity Level
What color code is used in the Qualys KnowledgeBase to identify QIDs that exhibit
predictable (but different) results in the presence or absence of authentication?
Choose an answer:
Blue
Yellow
Half-Red/Half-Yellow
Red
Cloud Agent
As a "best practice," associate an Activation Key with an Asset Tag, that uses the
_________________ Rule Engine.
Choose an answer:
IP Address in Range(s)
Open Ports
No Dynamic Rule
Which Cloud Agent status indicates an agent was upgraded to a new version?
Choose an answer:
Agent Downloaded
Provisioned
Manifest Downloaded
Configuration Downloaded
Communication sessions between Cloud Agent and the Qualys Platform must be
initiated by:
Choose an answer:
Qualys Platform
Cloud Agent
Which of the following Configuration Profile settings will allow you to upgrade agents,
using a third-party software management and distribution tool?
Choose an answer:
Suspend data collection for VM, PC and Inventory for all agents using this profile
Each activated Qualys application module provides a(n) __________ to deployed agents,
identifying tasks to be performed and data to be collected.
Choose an answer:
Manifest
Asset Tag
Activation Key
Configuration Profile
If you’ve configured the CPU Limit to 20%, for a group of Windows agents, the agents will
use:
Choose an answer:
Once an activation key is successfully generated it can be used with ________ of the
supported operating systems.
Choose an answer:
two
three
one
all
Which of the following is NOT a task associated with the Provisioning stage of the Agent
Lifecycle?
Choose an answer:
Agent generates its Qualys Host ID or re-provisions its Qualys Host ID for cloned images.
Agent attempts to connect to the Qualys Platform (with valid CustomerID and ActivationID)
Which Configuration Profile setting specifies the frequency an agent “checks in” to the
Qualys Platform, for status updates and new tasks?
Choose an answer:
Install Cloud Agent using a third-party software management and distribution tool.
Install Cloud Agent in a “Gold Image” used to instantiate numerous virtual hosts.
Which applications are subsequently covered by Cloud Agent when the VM module is
activated? (choose two)
Choose all that apply:
What is the recommended approach for removing Cloud Agent from its host?
Choose an answer:
Use Asset Search to locate the agent host, and select the "Purge" option from the "Actions"
menu.
Use the "Uninstall Agent" option from the host's "Quick Actions" menu.
Which Qualys application module is activated (by default) when an agent is deployed?
Choose an answer:
Which query will help you to find agents that have not checked-in within the last 7 days?
Choose an answer:
Assigned Hosts
Performance
Which of the following options and/or preferences can be defined inside a Cloud Agent
Activation Key? (choose 3)
Choose all that apply:
Set limits
Which Qualys application module captures and logs events as they occur?
Choose an answer:
Which of the following can potentially be received by an agent, when it checks in at its
regular Agent Status Interval?
Choose all that apply:
New Manifests
Uninstallation Command
Although Cloud Agent (CA) can be configured to support a proxy server; by default, CA
communicates back to the Qualys Cloud on which port number?
Choose an answer:
443
110
80
22
Limited to 1000 host assets and set to expire 12 months from its creation date.
The “Delta Upload Interval” and “Chunk sizes for file fragment uploads” settings (in the
Configuration Profile), are designed to impact the way an agent uses _________________ .
Choose an answer:
Disk Space
Host Memory
Network Bandwidth
Host CPU
After the agent’s initial snapshot has been uploaded to the Qualys Platform, all
successive uploads will contain _________.
Choose an answer:
Memory dumps
Which of the following indicators can potentially validate a successful Cloud Agent
installation? (choose 3)
Choose all that apply:
Successful communication status codes are recorded in the agent log file.
Which Cloud Agent status indicates the agent uploaded new host data, and an
assessment of the host was performed within the Qualys Cloud Platform?
Choose an answer:
Manifest Downloaded
Configuration Downloaded
Provisioned
Scan Complete
https://qualysguard.qg2.apps.qualys.com/portal-help/en/ca/agents/agent_status.htm
Global IT Asset Inventory and Management
Operating systems are categorized in Global IT Asset Inventory with _______ levels of
categorization.
Choose an answer:
Administration Utility
Policy Compliance
AssetView
Once Passive Sensor has discovered an asset, you can see data for that host by
Choose an answer:
What are the advantages of the Global Asset Inventory Application? Click all that apply.
(Choose 3)
Choose all that apply:
When configuring Network Passive sensor settings, you would use the _____ configuration
to define IPs of assets that you WANT to track.
Choose an answer:
External Assets
Excluded Assets
Internal Assets
Unmanaged Assets
After deploying the Passive Sensor and you can log into the Qualys Platform
and view the following performance statistics of each sensor:
Choose all that apply:
Traffic
RAM
CPU
SubmitCancel
Which of the following is NOT a life cycle stage on which you can search in your
Operating System inventory?
Choose an answer:
End-of-Life
End-of-Support
General Availability
Obsolete
Which of the following is NOT a life cycle stage on which you can search in your
Operating System inventory?
Choose an answer:
End-of-Life
End-of-Support
General Availability
Obsolete
What would words could best describe the data populating into Global IT Asset Inventory
from your sensors? (Choose 3)
Choose all that apply:
Incongruent
Structured
Continuous
Complete
There is enough information but the data isn’t cataloged in Global AI yet
Qualys enhances your software inventory in the platform by telling you when the
software is …. (choose 2)
Choose all that apply:
End-of-Support
End-of-Life
Isn't Compliant
Is vulnerable
Doesn’t match any of the devices that you already know about.
SubmitCancel
Data detected by a Passive Sensor can be merged with an existing asset when it matches
the following (choose 2):
Choose all that apply:
IP address only
Hostname only
Which sensor allows you to organize and categorize assets that connect to the corporate
network without actively scanning them?
Choose an answer:
Cloud Agent
CMDB Sync
Network Scanner
Passive Sensor
Passive Sensor
Cloud Connector
Network Scanner
CMDB Sync
SubmitCancel
Which sensor has the flexibility to provide vulnerability, compliance, and the ability to
patch vulnerabilities?
Choose an answer:
OCA
Passive Sensor
Cloud Agent
Network Scanner
Which of the following options do you have for creating Asset Tags? (Choose 3)
Choose all that apply:
Operating System
Software Installed
Qualys categorizes your software inventory by which of the following license types?
(Choose 2)
Choose all that apply:
Open Source
Extended
Premier
Commercial
What are considered good practices for creating Asset Groups (Choose 3)?
Choose all that apply:
Use IP ranges
Organize by geographic location
When creating Asset Groups, Qualys recommends creating them with _______
Choose an answer:
MAC Addresses
Hostnames
Individual IP addresses
When creating Asset Groups, Qualys recommends creating them with _______
Choose an answer:
MAC Addresses
Hostnames
Individual IP addresses
Virtual appliance
Hardware appliance
Agent
Mobile device
What does Qualys recommend using for running your Vulnerability and Compliance
Scans?
Choose an answer:
Asset Groups
Reports
Plans
Asset Tags
Which sensor works well for inventory of remote users who aren’t connected the
corporate network?
Choose an answer:
Passive Sensor
Cloud Agent
CMDB Sync
Network Scanner
Logical buckets for referring to host assets or domain assets are _________.
Choose an answer:
Hostnames
IP addresses
Asset Tags
Asset Groups
Select the items in this list that are TRUE about Asset Groups (Choose 3).
Choose all that apply: