QUALYS VMDR TRAINING
CERTIFICATION SCRIPT 2026
QUESTIONS WITH SOLUTIONS
GRADED A+
◍ Formal training.
Answer: is a key part of the enterprise training resource and plays a vital
role in maintaining readiness and a quality force
◍ Which of the following are benefits of scanning in authenticated mode?
(choose 2).
Answer: 1. More vulnerabilities are detected2. Time saved from manually
investigating potential vulnerabilities
◍ Which of the following are valid options for scanning targets? (choose 3).
Answer: 1. Asset Groups2. IP addressing3. Asset Tags
◍ What type of scanner appliance (already provisioned within the Qualys
Cloud Platform) is ideal for scanning public facing assets?.
Answer: External Scanner
◍ Formal training.
Answer: Its objectives are to develop and maintain professional and
technical skills, knowledge, and abilities to meet enterprise needs.
◍ Which of the following is NOT a component of a vulnerability scan?.
Answer: Host Discovery
◍ Formal training.
Answer: It provides advanced and supplemental training courses for
officers, enlisted, and civilian personnel when other types of training such as
OJT, unit training, or exportable training will not satisfy the need.
,◍ AFPC/DP3DAir Force Personnel Center/Military Classification.
Answer: is the OPR for the formal training program. Personnel assigned to
AETC are responsible for life-cycle management (planning, directing,
implementing, and overseeing) of AETC formal training pipelines. This
process begins with BMT and extends through advanced skills courses.
Personnel administer and execute MAJCOM/FLDCOM level training
management to include prioritizing and advocating training resource
requirements to the Air Staff.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLE In partnership with the CFM, acts as an
advisor during the STRT process and serves as co-chair for the U&TW
meetings; provide meeting participants information concerning training
policy guidance and resource impact recommendations.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLE Advises CFM on timelines to request
occupational analysis data, Field evaluation questionnaire summaries, trend
analyses, etc. for use during the STRT. Uses feedback data to recommend
efficient and effective training delivery methods. In coordination with the
DAF CFM, determines if proficiency levels for AETC courses require
adjustment based on feedback data and available resources.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLESupports the CFM to ensure training meets
AF specialty requirements.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLECoordinates all initial skills training
requirements are documented through development of the CFETP. List all
advanced/supplemental courses in the CFETP and explains what drives the
requirement for the course (certification, upgrade training, equipment,
assignment, etc.). New or revised CFETP changes are based on internal or
external training evaluation and feedback. Reviews and coordinates (include
ARC CFMs on coordination) on CFETPs prior to publication.
, ◍ Which of the following will have the greatest impact on a half red, half
yellow QID?.
Answer: Authentication
◍ What is the maximum number of TCP ports that can participate in the Host
Discovery process?.
Answer: 20
◍ Which of the following items are used to calculate the Business Risk score
for a particular asset group? (choose 2).
Answer: Business ImpactSecurity Risk
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLEProvides CFM with information to identify
and justify unfunded training resource requirements such as: resource
impact statements, STRT/U&TW minutes, and other applicable meeting
minutes. Produces standardized meeting minutes in partnership with the
CFM to accurately reflect training decisions and maintain UT&W results.
◍ MAJCOM/FLDCOMs.Attachment 3.
Answer: ROLE/RESPONSIBIBLEDevelop training and education programs
and provide guidance to schools under their jurisdiction. Use the course
development decision logic process to categorize formal courses in
Attachment ____. All charts are used singularly or in varying combinations
to meet DAF training needs.
◍ MAJCOM/FLDCOMs..
Answer: ROLE/RESPONSIBIBLEAppoint a commander or commandant
and a faculty board for each school in the command and determine board
procedures within the scope of applicable DAF instructions. The authority to
appoint a commandant may be delegated to a subordinate commander
having jurisdiction over the school. Authority to appoint a board and to
determine its procedures may be delegated to a commissioned officer at any
level of command.
◍ In order to successfully perform an authenticated (trusted) scan, you must
CERTIFICATION SCRIPT 2026
QUESTIONS WITH SOLUTIONS
GRADED A+
◍ Formal training.
Answer: is a key part of the enterprise training resource and plays a vital
role in maintaining readiness and a quality force
◍ Which of the following are benefits of scanning in authenticated mode?
(choose 2).
Answer: 1. More vulnerabilities are detected2. Time saved from manually
investigating potential vulnerabilities
◍ Which of the following are valid options for scanning targets? (choose 3).
Answer: 1. Asset Groups2. IP addressing3. Asset Tags
◍ What type of scanner appliance (already provisioned within the Qualys
Cloud Platform) is ideal for scanning public facing assets?.
Answer: External Scanner
◍ Formal training.
Answer: Its objectives are to develop and maintain professional and
technical skills, knowledge, and abilities to meet enterprise needs.
◍ Which of the following is NOT a component of a vulnerability scan?.
Answer: Host Discovery
◍ Formal training.
Answer: It provides advanced and supplemental training courses for
officers, enlisted, and civilian personnel when other types of training such as
OJT, unit training, or exportable training will not satisfy the need.
,◍ AFPC/DP3DAir Force Personnel Center/Military Classification.
Answer: is the OPR for the formal training program. Personnel assigned to
AETC are responsible for life-cycle management (planning, directing,
implementing, and overseeing) of AETC formal training pipelines. This
process begins with BMT and extends through advanced skills courses.
Personnel administer and execute MAJCOM/FLDCOM level training
management to include prioritizing and advocating training resource
requirements to the Air Staff.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLE In partnership with the CFM, acts as an
advisor during the STRT process and serves as co-chair for the U&TW
meetings; provide meeting participants information concerning training
policy guidance and resource impact recommendations.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLE Advises CFM on timelines to request
occupational analysis data, Field evaluation questionnaire summaries, trend
analyses, etc. for use during the STRT. Uses feedback data to recommend
efficient and effective training delivery methods. In coordination with the
DAF CFM, determines if proficiency levels for AETC courses require
adjustment based on feedback data and available resources.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLESupports the CFM to ensure training meets
AF specialty requirements.
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLECoordinates all initial skills training
requirements are documented through development of the CFETP. List all
advanced/supplemental courses in the CFETP and explains what drives the
requirement for the course (certification, upgrade training, equipment,
assignment, etc.). New or revised CFETP changes are based on internal or
external training evaluation and feedback. Reviews and coordinates (include
ARC CFMs on coordination) on CFETPs prior to publication.
, ◍ Which of the following will have the greatest impact on a half red, half
yellow QID?.
Answer: Authentication
◍ What is the maximum number of TCP ports that can participate in the Host
Discovery process?.
Answer: 20
◍ Which of the following items are used to calculate the Business Risk score
for a particular asset group? (choose 2).
Answer: Business ImpactSecurity Risk
◍ AETC/TPMAETC Training Pipeline Managers.
Answer: WHO/RESPONSIBLEProvides CFM with information to identify
and justify unfunded training resource requirements such as: resource
impact statements, STRT/U&TW minutes, and other applicable meeting
minutes. Produces standardized meeting minutes in partnership with the
CFM to accurately reflect training decisions and maintain UT&W results.
◍ MAJCOM/FLDCOMs.Attachment 3.
Answer: ROLE/RESPONSIBIBLEDevelop training and education programs
and provide guidance to schools under their jurisdiction. Use the course
development decision logic process to categorize formal courses in
Attachment ____. All charts are used singularly or in varying combinations
to meet DAF training needs.
◍ MAJCOM/FLDCOMs..
Answer: ROLE/RESPONSIBIBLEAppoint a commander or commandant
and a faculty board for each school in the command and determine board
procedures within the scope of applicable DAF instructions. The authority to
appoint a commandant may be delegated to a subordinate commander
having jurisdiction over the school. Authority to appoint a board and to
determine its procedures may be delegated to a commissioned officer at any
level of command.
◍ In order to successfully perform an authenticated (trusted) scan, you must