Qualys Guard Vulnerability Management Dumps

Qualysguard is one of the known vulnerability management tool that is used to scan the technical vulnerabilities. I am sharing this exam guide that will help you to pass Vulnerability Management (VM) exam. You will earn Qualys Certified Specialist certificate once you passed the exam. all questions and answers are verified and recently updated.

Important Exam Tips:

1. You have five attempts to pass this exam
2. The test is linear, no going back to an older question
3. The minimum passing score is 75% 
4. The exam can be taken anytime make sure your login session should be valid.
5. 30 questions with Multiple choices 

Note: All correct answers are highlighted with yellow color.

1. Which of the following are benefits of scanning in authenticated mode? (choose 2)

Choose an answer:

 Fewer confirmed vulnerabilities

 More vulnerabilities are detected

 Time saved from manually investigating potential vulnerabilities

 More accurate scan details

verified answer 

2. Which of the following are valid options for scanning targets? (choose 3)

Choose an answer:

 Asset Groups

 Domain Name

 IP addressing

 Asset Tags

 Search Lists

 MAC Address

3. What type of scanner appliance (already provisioned within the Qualys Cloud Platform) is ideal for scanning public facing assets?

Choose an answer:

 Offline Scanner

 Virtual Scanner

 External Scanner

 Internal Scanner

4. Which of the following is NOT a component of a vulnerability scan?

Choose an answer:

 Host Discovery

 OS Detection

 Port Scanning

 Business Impact

5. Which of the following will have the greatest impact on a half red, half yellow QID?

Choose an answer:

 Share Enumeration

 Scan Dead Hosts

 Authentication

 Authoritative Option

6. What is the maximum number of TCP ports that can participate in the Host Discovery process?

Choose an answer:

 10

 65535

 1900

 20

7. Which of the following items are used to calculate the Business Risk score for a particular asset group? (choose 2)

Choose an answer:

 Business Impact

 Security Risk

 CVSS Base

 CVE ID

8. In order to successfully perform an authenticated (trusted) scan, you must create a(n):

Choose an answer:

 Authentication Record

 Search List

 Asset Map

 Report Template

9. Multiple Remediation Policies are evaluated:

Choose an answer:

 From top to bottom

 From bottom to top

 Based on the rule creation date

 In no specific order

10. A search list contains a list of .

Choose an answer:

 QIDs

 Host Assets

 Applications

 Asset Groups

11. Dynamic Asset Tags are updated every time you..

Choose an answer:

 Run a scan

 Create a remediation policy

 Run a report

 Search the KnowledgeBase

12. As a Manager in Qualys, which activities can be scheduled?

Choose an answer:

 Asset Searches

 Updates to the KnowledgeBase

 Maps

 Reports

 Scans

13. What does it mean when a “pencil” icon is associated with a QID in the Qualys KnowledgeBase?

Choose an answer:

 There is malware associated with the QID

 The QID has a known exploit

 The QID has been edited

 A patch is available for the QID

14. Which item is not mandatory for launching a vulnerability scan?

Choose an answer:

 Target Hosts

 Option Profile

 Authentication Record

 Scanner Appliance

15. About how many services can Qualys detect via the Service Detection Module?

Choose an answer:

 13

 512

 20

 600

16. By default, the first user added to a new Business Unit becomes a ____________ for that unit.

Choose an answer:

 Auditor

 Administrator

 Reader

 Scanner

 Unit Manager

17. In a new Option Profile, which authentication options are enabled by default?

Choose an answer:

 All

 Unix

 Windows

 None

18. Which of the following vulnerability scanning options requires the use of a “dissolvable agent”?

Choose an answer:

 Windows Share Enumeration

 TCP port scanning

 Scan Dead Hosts

 UDP port scanning

19. To produce a scan report that includes the results from a specific scan that occurred at a specific point in time, you should select the _______________ option in the Report Template.

Choose an answer:

 Scan Based Findings

 Dynamic Findings

 Static Findings

 Host Based Findings

20. About how many TCP ports are scanned when using Standard Scan option?

Choose an answer:

 1900

 10

 20

 65535

21. Asset Groups and Asset Tags can be used to effectively customize or fine tune … (choose all that apply)

Choose an answer:

 Reports

 Vulnerability Scans

 Remediation Policies

 Search Lists

22. What is required in order for Qualys to generate remediation tickets? (choose all that apply)

Choose an answer:

 Scan Results need to be processed by Qualys

 A Policy needs to be created

 A Map needs to be run

 A Remediation Report needs to be run

23. Before you can scan an IP address for vulnerabilities, the IP address must first be added to the.

Choose an answer:

 Host Assets tab

 Business Units tab

 Domains tab

 Search List tab

24. What is the 6-step lifecycle of Qualys Vulnerability Management?

Choose an answer:

 Mapping, Scanning, Reporting, Remediation, Simplification, Authentication

 Learning, Listening, Permitting, Forwarding, Marking, Queuing

 Bandwidth, Delay, Reliability, Loading, MTU, Up Time

 Discover, Organize Assets, Assess, Report, Remediate, Verify

25. To exclude a specific QID/vulnerability from a vulnerability scan you would:

Choose an answer:

 Disable the QID in the Qualys KnowledgeBase.

 Ignore the vulnerability from within a report.

 Place the QID in a search list, and exclude that search list from within the Option Profile.

 You cannot exclude QID/Vulnerabilities from vulnerability scans.

26. Which of the following components are included in the raw scan results, assuming you do not apply a Search List to your Option Profile? (choose all that apply)

Choose an answer:

 Host IP

 Option Profile Settings

 Potential Vulnerabilities

 Information Gathered

 Vulnerabilities

27. Which of the following types of items can be found in the Qualys KnowledgeBase? (choose all that apply)

Choose an answer:

 Potential Vulnerabilities

 Configuration data (Information Gathered)

 Confirmed Vulnerabilities

 Asset Groups

 Remediation Tickets

28. Which three features of the Vulnerability Management application can be customized using a KnowledgeBase "Search List"?

Choose an answer:

 Authentication Records

 Report Templates

 Remediation Policies

 Option Profiles

29. What type of Search List adds new QIDs to the list when the Qualys KnowledgeBase is updated?

Choose an answer:

 Active

 Static

 Dynamic

 Passive

31. When a host is removed from your subscription, the Host Based Findings for that host are.

Choose an answer:

 Ranked

 Purged

 Ignored

 Archived