Vulnerability Management Detection and Response (VMDR) Exam 2.0
Vulnerability Management Detection and Response (VMDR) Exam 2.0
Which type of Dashboard Widget can be configured to change color, as its tracked data reaches
specific conditions or threshold levels?
2. Which of the following frequencies, can be used to schedule a Patch Deployment Job? Select all
that apply.
3. Which Qualys application module is NOT include in the Default VMDR Activation Key?
4. Which Qualys application, provides the Real-Time Threat Indicators (RTIs) used in the VMDR
Prioritization Report?
5. The Qualys CSAM application distinguishes your asset inventory using which of the following
categories? Select all that apply.
Software Hardware
6. Which “Active Threat” category includes attacks that require little skill and do not require
additional information?
2000 1250
1750 1500
8. Which Qualys technology provides a patch download cache, to achieve a more efficient
distribution of downloaded patches, to local agent host assets?
9. Using the “Search” field (found in the VULNERABILITIES section of VMDR), which query will
produce a list of “patchable” vulnerabilities?
vulnerabilities.vulnerability.qualysPatchable:TRUE
vulnerabilities.vulnerability.isPatchable:TRUE
vulnerabilities.vulnerability.qualysPatchable:FALSE
vulnerabilities.vulnerability.isPatchable:FALSE
10. Which of the following queries will display assets with a Relational Database Management
System?
11. By default, which of the following factors are used by the VMDR Prioritization Report, to
prioritize vulnerabilities? Select all that apply.
12. Which “Active Threat” category includes vulnerabilities that are actively attacked and have no
patch available?
13. Which of the following conventions can be used to include or assign host assets to a job? Select
all that apply.
14. Qualys categorizes your software inventory by which of the following license types? Select all
that apply.
Premier Trial
15. You are in the process of inducting new employees on the Global AssetView application. In your
presentation you have to add the features of this application. Which features from the below
mentioned list will you include? Select all that apply.
16. You have been asked to create a “Zero-Touch” patch deployment job. You have already
scheduled this job to run once a week. What additional requirement must be met?
Select patches using Asset Tags Defer patch selection to a later time
Vulnerabilities Assets
18. Once you establish your priority option you can generate your Prioritization Report. By default
this report will produce a list of _________ that match your priority options.
19. After Qualys Cloud Agent has been successfully installed on a target host, which of the following
“Patch Management” setup steps must be completed, before host patch assessments can begin?
Select all that apply.
20. You have to prioritize the vulnerabilities by age before you go ahead and generate a
Prioritization Report. When you are prioritizing vulnerabilities by age, you have the options of:
Select all that apply.
21. In CSAM, the term “unidentified” means: Select all that apply.
There is enough information, but the data isn’t catalogued in CSAM yet
Qualys could fully fingerprint the OS but it’s not in your subscription
22. You were unable to search some of your Operating Systems using a lifecycle query. Later, you
found out the reason. The lifecycle stage of the operating system you were searching was:
23. Which of the following conditions must be met, in order for Qualys Patch Management to
successfully patch a discovered vulnerability? Select all that apply.
The vulnerability should be less than 30 days The vulnerability must be confirmed, The
vulnerability’s host must be running Qualys Cloud Agent The vulnerability must be patchable
24. You have to run a patch job on a regular basis. Which of the following will you follow in order to
make your work efficient? Select all that apply.
25. The Threat Feed leverages data from multiple sources. Which of the following sources are used?
Select all that apply.
Other Sources Exploit Sources Malware Sources Qualys Threat and Malware Research Team
26. You have deployed several thousand Qualys Cloud Agents, and now you would like to conserve
network bandwidth by allowing your agents to store and share their downloaded patches (from
a central location). Which Qualys technology is the best fit to solve this challenge?
Qualys Passive Sensor Qualys Gateway Server Qualys Cloud Connector Qualys Scanner Appliance
27. You have to analyse the threat intelligence information provided by Qualys Threat and Malware
Labs. Where will you find this information?
VMDR > Vulnerabilities tab > Asset VMDR > Dashboard tab
VMDR > Prioritization tab > Threat Feed VMDR > Prioritization tab > Reports
28. Your colleague has just completed the following steps to setup your Qualys account for patching:
1. Installed Qualys Cloud Agent on target hosts. 2. Assigned all Agent hosts to a Configuration
Profile with PM configuration enabled. 3. Activated the PM application module for all Agent
hosts. 4. Assigned all hosts to an enabled Assessment Profile. Although Deployment Jobs have
been created and enabled, patches are not getting installed. What step did your colleague miss?
29. A pre-deployment message appears at the start of a patch job. You have to create a deployment
job for a Windows user wherein he will receive a notification message to the user indicating that
a reboot is required. What communication option will you select?
30. Your IT team has configured a patch window to run a deployment job within 5 hours. Due to
some reason you were not able to start the patch installation within that window. What status
will they host display?