QUALYS VULNERABILITY
MANAGEMENT DETECTION AND
RESPONSE FINAL STUDY GUIDE 2026
COMPLETE QUESTIONS AND
ANSWERS.
What are the major steps to take in "Inventory and Control
Software Assets?". Answer: 1. Establish and Maintain a Software
Inventory
2. Ensure Authorized Software Is Currently Supported
3. Address Unauthorized Software
What are the major steps to take in "Protect Data?". Answer: 1.
Establish and Maintain a Data Management Process
2. Establish and Maintain a Data Inventory
3. Configure Data Access Control Lists
4. Enforce Data Retention
5. Securely Dispose of Data
6. Encrypt Data on End-User Devices
What should be addressed during Establish and Maintain a Data
Management Process?. Answer: 1. What type of data does the
university process or store?
2. Where is the data processed or stored?
, 3. Who has access to each type of data?
What is CIA?. Answer: Confidentiality, Integrity, and
Availability
What are the steps for secure configuration and baseline image?.
Answer: 1. Determine the risk classification of the data handled or
stored on the asset.
2. Create a security configuration script that sets system security
settings to meet the requirements to protect the data used on the asset.
3. Install the base operating system software.
4. Apply appropriate operating system and security patches.
5. Install appropriate application software packages, tools, and
utilities.
6. Apply appropriate updates to operating systems.
Install local customization scripts to this image.
7. Run the security script created earlier to set the appropriate security
level.
8. Run a Security Content Automation Protocol (SCAP) compliant
tool to record and score the system setting of the baseline image.
9. Perform a security quality assurance test.
10. Save this base image in a secure location.
What are the Safeguards?. Answer: 1. Establish and Maintain a
Secure Configuration Process
2.Establish and Maintain a Secure Configuration Process for Network
Infrastructure
MANAGEMENT DETECTION AND
RESPONSE FINAL STUDY GUIDE 2026
COMPLETE QUESTIONS AND
ANSWERS.
What are the major steps to take in "Inventory and Control
Software Assets?". Answer: 1. Establish and Maintain a Software
Inventory
2. Ensure Authorized Software Is Currently Supported
3. Address Unauthorized Software
What are the major steps to take in "Protect Data?". Answer: 1.
Establish and Maintain a Data Management Process
2. Establish and Maintain a Data Inventory
3. Configure Data Access Control Lists
4. Enforce Data Retention
5. Securely Dispose of Data
6. Encrypt Data on End-User Devices
What should be addressed during Establish and Maintain a Data
Management Process?. Answer: 1. What type of data does the
university process or store?
2. Where is the data processed or stored?
, 3. Who has access to each type of data?
What is CIA?. Answer: Confidentiality, Integrity, and
Availability
What are the steps for secure configuration and baseline image?.
Answer: 1. Determine the risk classification of the data handled or
stored on the asset.
2. Create a security configuration script that sets system security
settings to meet the requirements to protect the data used on the asset.
3. Install the base operating system software.
4. Apply appropriate operating system and security patches.
5. Install appropriate application software packages, tools, and
utilities.
6. Apply appropriate updates to operating systems.
Install local customization scripts to this image.
7. Run the security script created earlier to set the appropriate security
level.
8. Run a Security Content Automation Protocol (SCAP) compliant
tool to record and score the system setting of the baseline image.
9. Perform a security quality assurance test.
10. Save this base image in a secure location.
What are the Safeguards?. Answer: 1. Establish and Maintain a
Secure Configuration Process
2.Establish and Maintain a Secure Configuration Process for Network
Infrastructure
