QUALYS VULNERABILITY
MANAGEMENT DETECTION AND
RESPONSE CYBERSECURITY REVIEW
2026 QUESTIONS WITH SOLUTIONS
TESTED QUESTIONS.
▶ You need to ensure that authentication is working for your
scannable host assets. Which of the following would be a suitable
method of tracking authentication failures on an ongoing basis?
Answer: Use the Subscription Health Dashboard
▶ You have been told that several assets have been decommisioned,
and their IP addresses will soon be re-used. What action should you
take to ensure data hygiene in your subscription? Answer: Purge the
vulnerability history of the decommissioned assets
▶ You are planning to implement role-based access control in your
Qualys subscription. Some users need to be able to initiate
vulnerability scan and also read reports. Which role should you apply
to those user accounts? Answer: Scanner
▶ You need to ensure that your scan jobs collect information from
the hosts which is as accurate as possible. Which setting in the Unix
Authentication Record should you include? Answer: Root delegation
, ▶ Your organization is implementing risk-based vulnerability
management, using Qualys TruRisk. A project team has now
introduced a new group of servers which run a critical application.
How can you ensure that these new assets will be prioritized
appropriately? Answer: Assign a new Asset Tag with an Asset
Criticality score of 5 to the new assets
▶ Why should you enable Unified Vulnerabilitiy View? Answer: In
order to merge scan data and agent data
▶ You have decided to configure scan jobs to use Asset Tags as the
method of targeting hosts. Which type of Asset Tags should you
configure in order to adhere to recommended practices for scanning
an infrastructure? Answer: Dynamic - IP Address in Range(s)
▶ You decide to check your firewall rules to confirm that the Qualys
External scanners can reach your internet-facing assets. Where can
you easily find the IP addresses of the Qualys External scanners
which are used in your subscription? Answer: Go to the Help menu
and then click on ""About""
▶ You would like to quickly identify the number of assets which
have end-of-life software. What is the best way to achieve this?
Answer: Create a dashboard widget which uses the following QQL
query software:(lifecycle.stage: `EOL`)
▶ Qualys TruRisk is comprised of which two components?
Answer: Asset Criticality Score
Qualys Detection Score
MANAGEMENT DETECTION AND
RESPONSE CYBERSECURITY REVIEW
2026 QUESTIONS WITH SOLUTIONS
TESTED QUESTIONS.
▶ You need to ensure that authentication is working for your
scannable host assets. Which of the following would be a suitable
method of tracking authentication failures on an ongoing basis?
Answer: Use the Subscription Health Dashboard
▶ You have been told that several assets have been decommisioned,
and their IP addresses will soon be re-used. What action should you
take to ensure data hygiene in your subscription? Answer: Purge the
vulnerability history of the decommissioned assets
▶ You are planning to implement role-based access control in your
Qualys subscription. Some users need to be able to initiate
vulnerability scan and also read reports. Which role should you apply
to those user accounts? Answer: Scanner
▶ You need to ensure that your scan jobs collect information from
the hosts which is as accurate as possible. Which setting in the Unix
Authentication Record should you include? Answer: Root delegation
, ▶ Your organization is implementing risk-based vulnerability
management, using Qualys TruRisk. A project team has now
introduced a new group of servers which run a critical application.
How can you ensure that these new assets will be prioritized
appropriately? Answer: Assign a new Asset Tag with an Asset
Criticality score of 5 to the new assets
▶ Why should you enable Unified Vulnerabilitiy View? Answer: In
order to merge scan data and agent data
▶ You have decided to configure scan jobs to use Asset Tags as the
method of targeting hosts. Which type of Asset Tags should you
configure in order to adhere to recommended practices for scanning
an infrastructure? Answer: Dynamic - IP Address in Range(s)
▶ You decide to check your firewall rules to confirm that the Qualys
External scanners can reach your internet-facing assets. Where can
you easily find the IP addresses of the Qualys External scanners
which are used in your subscription? Answer: Go to the Help menu
and then click on ""About""
▶ You would like to quickly identify the number of assets which
have end-of-life software. What is the best way to achieve this?
Answer: Create a dashboard widget which uses the following QQL
query software:(lifecycle.stage: `EOL`)
▶ Qualys TruRisk is comprised of which two components?
Answer: Asset Criticality Score
Qualys Detection Score
