QUALYS PATCH MANAGEMENT (PM);(
80%) PRACTICE EXAMINATION 2026
QUESTIONS WITH ANSWERS GRADED A+
◍ Which of the following is the default tracking method used by Qualys Cloud
Agents?(A) IP Address(B) Qualys Host ID(C) DNS Name(D) NetBIOS
Name.
Answer: (B) Qualys Host ID
◍ Report templates cannot be customized.(A) Incorrect(B) Correct.
Answer: (A) Incorrect
◍ A static Search List is created and updated ____________.(A) Manually (B)
Explicit (C) By Default(D) Automatically.
Answer: (A) Manually
◍ Remediation policies for the teams dedicated to specific groups of host
assets can be constructed using _____________ Groups.(A) Asset(B)
Application(C) Scanning(D) Vulnerability.
Answer: (A) Asset
◍ To scan the IP addresses in your Qualys subscription you first need to
add:(A) Scan Preferences (B) Host IPs(C) Asset Tag(D) Asset Group.
Answer: (B) Host IPs
◍ Identify the most privileged user role.(A) Administrator(B) Manager(C)
Scanner(D) Auditor user.
Answer: (B) Manager
◍ Identify the report types that can be scheduled: (Select Three)(A) Asset
reports(B) Scan reports using Host-based Findings(C) Patch reports(D)
Application reports(E) Remediation reports.
, Answer: (B) Scan reports using Host-based Findings(C) Patch reports(E)
Remediation reports
◍ List the default tracking methods available for adding assets to your
"scanning" subscription. (Select Three)(A) DNS Name(B) NetBIOS
Name(C) CVE ID(D)Qualys Host ID(E) IP Address.
Answer: (A) DNS Name(B) NetBIOS Name(E) IP Address
◍ Why is it beneficial to configure the Business Impact of an Asset Group?(A)
It's used to calculate Business Risk(B) It's used to calculate storage space(C)
It's used to calculate Severity Levels (D) It's used to calculate CVSS Scores.
Answer: (A) It's used to calculate Business Risk
◍ Which of the following are required to launch a vulnerability scan? (Select
Three)(A) Target Hosts (B) Scanner Appliance(C) Authentication(D)
Option Profile.
Answer: (A) Target Hosts (B) Scanner Appliance(D) Option Profile
◍ Only the _________ user role can edit QIDs in your account
KnowledgeBase.(A) Manager (B) Administrator(C) Scanner (D) Unit
Manager.
Answer: (A) Manager
◍ A "static" Asset Tag will adjust dynamically and automatically to changes
made to your host assets. (True/False)(A) True(B) False.
Answer: (B) False
◍ ___________ can be set on your remediation policy to ensure you are
tracking the remediation of vulnerabilities on host systems is occurring in a
timely manner.(A) Filtering(B) Processing(C) Deadlines(D) Ordering.
Answer: (C) Deadlines
◍ It is a "best practice" to perform your assessment scans in "_____________"
mode.(A) Authenticated (B) Authorized(C) Administrative(D) Scanning.
Answer: (A) Authenticated
◍ Name the types of reports:(Select Four)(A) Scan Report(B) Map Report(C)
80%) PRACTICE EXAMINATION 2026
QUESTIONS WITH ANSWERS GRADED A+
◍ Which of the following is the default tracking method used by Qualys Cloud
Agents?(A) IP Address(B) Qualys Host ID(C) DNS Name(D) NetBIOS
Name.
Answer: (B) Qualys Host ID
◍ Report templates cannot be customized.(A) Incorrect(B) Correct.
Answer: (A) Incorrect
◍ A static Search List is created and updated ____________.(A) Manually (B)
Explicit (C) By Default(D) Automatically.
Answer: (A) Manually
◍ Remediation policies for the teams dedicated to specific groups of host
assets can be constructed using _____________ Groups.(A) Asset(B)
Application(C) Scanning(D) Vulnerability.
Answer: (A) Asset
◍ To scan the IP addresses in your Qualys subscription you first need to
add:(A) Scan Preferences (B) Host IPs(C) Asset Tag(D) Asset Group.
Answer: (B) Host IPs
◍ Identify the most privileged user role.(A) Administrator(B) Manager(C)
Scanner(D) Auditor user.
Answer: (B) Manager
◍ Identify the report types that can be scheduled: (Select Three)(A) Asset
reports(B) Scan reports using Host-based Findings(C) Patch reports(D)
Application reports(E) Remediation reports.
, Answer: (B) Scan reports using Host-based Findings(C) Patch reports(E)
Remediation reports
◍ List the default tracking methods available for adding assets to your
"scanning" subscription. (Select Three)(A) DNS Name(B) NetBIOS
Name(C) CVE ID(D)Qualys Host ID(E) IP Address.
Answer: (A) DNS Name(B) NetBIOS Name(E) IP Address
◍ Why is it beneficial to configure the Business Impact of an Asset Group?(A)
It's used to calculate Business Risk(B) It's used to calculate storage space(C)
It's used to calculate Severity Levels (D) It's used to calculate CVSS Scores.
Answer: (A) It's used to calculate Business Risk
◍ Which of the following are required to launch a vulnerability scan? (Select
Three)(A) Target Hosts (B) Scanner Appliance(C) Authentication(D)
Option Profile.
Answer: (A) Target Hosts (B) Scanner Appliance(D) Option Profile
◍ Only the _________ user role can edit QIDs in your account
KnowledgeBase.(A) Manager (B) Administrator(C) Scanner (D) Unit
Manager.
Answer: (A) Manager
◍ A "static" Asset Tag will adjust dynamically and automatically to changes
made to your host assets. (True/False)(A) True(B) False.
Answer: (B) False
◍ ___________ can be set on your remediation policy to ensure you are
tracking the remediation of vulnerabilities on host systems is occurring in a
timely manner.(A) Filtering(B) Processing(C) Deadlines(D) Ordering.
Answer: (C) Deadlines
◍ It is a "best practice" to perform your assessment scans in "_____________"
mode.(A) Authenticated (B) Authorized(C) Administrative(D) Scanning.
Answer: (A) Authenticated
◍ Name the types of reports:(Select Four)(A) Scan Report(B) Map Report(C)
