Qualys Vulnerability Management Detection and Response (VMDR) Practice Test Questions And Answers Verified 100% Correct

Qualys Vulnerability Management Detection and Response (VMDR) Practice Test Questions And Answers Verified 100% Correct You have to explain to your team how the VMDR for ITSM has some very useful features. Which points will you stress? - ANSWER -Allows rule-based imports of vulnerabilities, risks, and patch recommendations -Provides unified security and IT threat response paths for faster remediation -Assigns vulnerability findings to their appropriate owner, automatically On one of the host assets, the Asset Criticality Score (ACS) is 4. The vulnerabilities are categorized with Qualys Detection Score (QDS) asCritical - 93,High - 82,Medium 61, andLow - 28. Given that the weightage for Critical is 1.0, High is 0.7, Medium is 0.4, and Low is 0.25, What will be the Asset Risk Score (ARS)? Calculate using the ARS formula. - ANSWER 909 A host asset is tagged under multiple Asset Tags. Each Asset Tag has an associate Asset Criticality Score (ACS), such as Servers - 3, Data Center - 4, and GCP US - 4. The Qualys Detection Score (QDS) is noted as Critical - 95, High - 83, Medium 60, and Low - 31. - ANSWER 739 You have to analyze the threat intelligence information provided by Qualys Threat and Malware Labs. Where will you find this information? - ANSWER VMDR Prioritization tab Threat Feed When you are prioritizing vulnerabilities by age, you have the option of _______. - ANSWER -Vulnerability Age -Detection Age After building a Prioritization Report, you want to monitor the report's contents regularly. What is the recommended action? - ANSWER Export the report to dashboard and create a dynamic widget Which of the following prioritization factors can be used to create a Prioritization Report? - ANSWER -Threat Intelligence -Asset Context You have to run a patch job regularly. Which of the following will you follow to make your work efficient? - ANSWER -Once test deployments are verified, clone the deployment job and include production asset tags. -Use Asset Tags as targets for patch deployment jobs. How can you use the search bar to significantly reduce the total number of Windows patches to be installed? - ANSWER Use the query: isSuperseded:`false` Your colleague has just completed the following steps to set up your Qualys account for patching: 1. Installed Qualys Cloud Agent on target hosts. 2. Assigned all Agent hosts to a Configuration Profile with PM configuration enabled. 3. Activated the PM application module for all Agent hosts. 4. Assigned all hosts to an enabled Assessment Profile. Although Deployment Jobs have been created and enabled, patches are not getting installed. What step did your colleague miss? - ANSWER Targeted assets must be configured to consume a patching license After Qualys Cloud Agent has been successfully installed on a target host, which of the following "Patch Management" setup steps must be completed before host patch assessments can begin? - ANSWER -Assign host to an enabled PM Assessment Profile -Activate PM module on host -Assign host to CA Configuration Profile (with PM enabled) Which of the following is an essential step in the Qualys Patch Management workflow? - ANSWER Activate PM module on target agent host How can Asset Tags help you create an efficient Patch Deployment Job? - ANSWER By specifying hosts to include and exclude for patching Which of the following frequencies can be used to schedule a Patch Deployment Job? Select two. - ANSWER -Daily Presently, you can add up to _____ patches to a single job. - ANSWER Which phase of the VMDR Lifecycle is addressed by Qualys Patch Management (PM)? - ANSWER Response You are in the process of inducting new employees on the Global AssetView application. In your presentation, you have to add the features of this application. Which features from the below-mentioned list will you include? - ANSWER Categorized and normalized hardware and software information -Discovery and inventory of all IT assets -Asset Criticality Score Match the hardware, software, and operating system lifecycle stages with their descriptions. - ANSWER General Availability (GA) - The product is available for purchase. End of Sale (EOS) - The product is no longer being sold by the vendor. End of Life (EOL) - No longer marketing, selling, building new features or promoting the product Obsolete (OBS) / End of Service - The product is no longer serviced via upgrades, patches, or maintenance. Can you recall the right phases of the VMDR Lifecycle? - ANSWER Asset Management, Vulnerability Management, Threat Detection & Prioritization, Response Which key will enable you to install Qualys Cloud Agent from the VMDR Welcome Page? - ANSWER Default VMDR Activation Key What are the prerequisites to integrate Qualys with ServiceNow CMDB? - ANSWER - Qualys subscription with CyberSecurity Asset Management license -CMDB Sync enabled for Qualys account -Qualys CMDB Sync or Service Graph Connector app installed in ServiceNow If adequate data exists with the Qualys Platform to properly categorize an asset as hardware or OS, but they have yet to be added to the asset catalog, they will be listed as __________. - ANSWER Unknown Describe the query that will produce a list of "patchable" vulnerabilities when entered in the Search field of Vulnerabilities section of VMDR. - ANSWER sPatchable:TRUE State the Qualys sensors that collect the data needed to perform vulnerability assessments. - ANSWER -Scanner Appliance -Cloud Agent Which type of Dashboard Widget can be configured to change color, as its tracked data reaches specific conditions or threshold levels? - ANSWER Count