QUALYS PATCH MANAGEMENT (PM);(
80%) ACTUAL EXAM PAPER 2026
QUESTIONS WITH ANSWERS GRADED A+
◍ Which of the following PM setup steps must be completed, before host
patch assessments can begin? (choose 3) (Choose all that apply)(A) Assign
host to a PM Job(B) Activate PM module on host(C) Assign host to an
enabled PM Assessment Profile(D) Assign host to CA Configuration Profile
(with PM enabled).
Answer: (B) Activate PM module on host(C) Assign host to an enabled PM
Assessment Profile(D) Assign host to CA Configuration Profile (with PM
enabled)
◍ Using the "Search" field (found in the VULNERABILITIES section of the
VM Dashboard), which query will produce a list of "patchable"
vulnerabilities?(A)vulnerabilities.vulnerability.qualysPatchable:TRUE(B)vulnerabili
Answer: (D)vulnerabilities.vulnerability.isPatchable:TRUE
◍ Which query token can be used to display patches that cannot be
downloaded by Qualys' Cloud Agent?(A) agentDownload(B)
isDownload(C) qualysDownload(D) downloadMethod.
Answer: (D) downloadMethod
◍ Which sections of the PM application, provide you with the ability to create
a patch job? (choose 3)(Choose all that apply)(A) ASSETS(B)
CONFIGURATION (C) PATCHES(D) JOBS.
Answer: (A) ASSETS(B) CONFIGURATION (C) PATCHES
◍ Which of the following conventions can be used to include or assign host
assets to a job? (choose 2) (Select all that apply)(A) Asset Name(B) Asset
Group(C) Business Unit(D) Asset Tag.
, Answer: (A) Asset Name(D) Asset Tag
◍ What type of assets appear in the ASSETS section of the Qualys Patch
Management application? (choose 2) (Choose all that apply)(A) Assets with
the PM module activated(B) Only assets that have already been scanned(C)
Assets running the Qualys Cloud Agent(D) Only assets that have already
been patched.
Answer: (A) Assets with the PM module activated(B) Only assets that have
already been scanned
◍ Within a PM Assessment Profile, what is the minimum value, for patch
assessment frequency?(A) 24 hours(B) 4 hours(C) 12 hours(D) 1 hour.
Answer: (A) 24 hours
◍ Additional assets can be added to a(n) __________ job, both before and
after it has been enabled.(A) On-Demand(B) Uninstall(C) Recurring(D)
Run-Once.
Answer: (C) Recurring
◍ Additional assets or patches can be added to any existing patch job:(A)
Once the job has been approved(B) After the job has completed(C) Before
the job is enabled(D) Before the job begins to run.
Answer: (C) Before the job is enabled
◍ Patching messages and notifications are managed by the __________
process.(A) Qualys Cloud Agent(B) Qualys Cloud Agent UI(C)
stdeploy.exe(D) notify.exe.
Answer: (B) Qualys Cloud Agent UI
◍ Which of the following tasks are performed by a Qualys patch job? (choose
2) (Choose all that apply)(A) Discover patches already installed(B) Install or
deploy missing patches(C) Uninstall existing patches(D) Discover missing
patches.
Answer: (B) Install or deploy missing patches(C) Uninstall existing patches
◍ Application and OS patching are available for hosts running the Qualys
__________ __________ .(A) Passive Sensor(B) Cloud Agent(C) Scanner
80%) ACTUAL EXAM PAPER 2026
QUESTIONS WITH ANSWERS GRADED A+
◍ Which of the following PM setup steps must be completed, before host
patch assessments can begin? (choose 3) (Choose all that apply)(A) Assign
host to a PM Job(B) Activate PM module on host(C) Assign host to an
enabled PM Assessment Profile(D) Assign host to CA Configuration Profile
(with PM enabled).
Answer: (B) Activate PM module on host(C) Assign host to an enabled PM
Assessment Profile(D) Assign host to CA Configuration Profile (with PM
enabled)
◍ Using the "Search" field (found in the VULNERABILITIES section of the
VM Dashboard), which query will produce a list of "patchable"
vulnerabilities?(A)vulnerabilities.vulnerability.qualysPatchable:TRUE(B)vulnerabili
Answer: (D)vulnerabilities.vulnerability.isPatchable:TRUE
◍ Which query token can be used to display patches that cannot be
downloaded by Qualys' Cloud Agent?(A) agentDownload(B)
isDownload(C) qualysDownload(D) downloadMethod.
Answer: (D) downloadMethod
◍ Which sections of the PM application, provide you with the ability to create
a patch job? (choose 3)(Choose all that apply)(A) ASSETS(B)
CONFIGURATION (C) PATCHES(D) JOBS.
Answer: (A) ASSETS(B) CONFIGURATION (C) PATCHES
◍ Which of the following conventions can be used to include or assign host
assets to a job? (choose 2) (Select all that apply)(A) Asset Name(B) Asset
Group(C) Business Unit(D) Asset Tag.
, Answer: (A) Asset Name(D) Asset Tag
◍ What type of assets appear in the ASSETS section of the Qualys Patch
Management application? (choose 2) (Choose all that apply)(A) Assets with
the PM module activated(B) Only assets that have already been scanned(C)
Assets running the Qualys Cloud Agent(D) Only assets that have already
been patched.
Answer: (A) Assets with the PM module activated(B) Only assets that have
already been scanned
◍ Within a PM Assessment Profile, what is the minimum value, for patch
assessment frequency?(A) 24 hours(B) 4 hours(C) 12 hours(D) 1 hour.
Answer: (A) 24 hours
◍ Additional assets can be added to a(n) __________ job, both before and
after it has been enabled.(A) On-Demand(B) Uninstall(C) Recurring(D)
Run-Once.
Answer: (C) Recurring
◍ Additional assets or patches can be added to any existing patch job:(A)
Once the job has been approved(B) After the job has completed(C) Before
the job is enabled(D) Before the job begins to run.
Answer: (C) Before the job is enabled
◍ Patching messages and notifications are managed by the __________
process.(A) Qualys Cloud Agent(B) Qualys Cloud Agent UI(C)
stdeploy.exe(D) notify.exe.
Answer: (B) Qualys Cloud Agent UI
◍ Which of the following tasks are performed by a Qualys patch job? (choose
2) (Choose all that apply)(A) Discover patches already installed(B) Install or
deploy missing patches(C) Uninstall existing patches(D) Discover missing
patches.
Answer: (B) Install or deploy missing patches(C) Uninstall existing patches
◍ Application and OS patching are available for hosts running the Qualys
__________ __________ .(A) Passive Sensor(B) Cloud Agent(C) Scanner
