QUALYS COMPREHENSIVE EXAM STUDY
GUIDE COMPLETE QUESTIONS AND
SOLUTIONS
●● role
Answer: A record in the sys_user_role table that can be assigned to users
or groups and grants permissions like create, read, update, delete.
●● Vulnerable Item (VI)
Answer: A unique combination of a vulnerability, configuration item,
and integration instance.
●● Remediation Task (RT)
Answer: A specific action or set of actions assigned to address and
resolve one or more Vulnerability Item(s).
●● Security Integration Framework application
Answer: The application that allows for the ingestion of data from third-
party security tools and facilitates real-time data updates from multiple
security sources.
●● Vulnerability Admin
,Answer: The persona that has complete access to the entire Vulnerability
Response application.
●● Vulnerability Solutions Management application
Answer: The application that helps identify appropriate remediation
solutions based on the types of vulnerabilities detected.
●● Common Weakness Enumeration (CWE) weakness
Answer: A condition in a software, firmware, hardware, or service that
could introduce vulnerabilities and has been assigned an ID (e.g.,
"CWE-798"), name, description, and applicable platforms by the
MITRE corporation.
●● Common Vulnerability and Exposure (CVE) entry
Answer: A publicly reported vulnerability in a specific product version
that has been assigned an identification number and description by
MITRE corporation.
●● Vulnerability Entry [sn_vul_entry]
Answer: A record imported from external sources such as the National
Vulnerability Database and the Qualys Knowledgebase which describes
a hardware or software weakness with an id, risk score, and summary.
●● Vulnerability Calculator
,Answer: A record in the table sn_vul_calculator_group which assesses
the risk associated with individual Vulnerability Entries and calculates
severity scores.
●● Rollup Calculator [sn_vul_rollup]
Answer: A record that assigns risk score to individual Vulnerable Items
(VI) by aggregating risk information from all the Vulnerability Entries
linked to the VI.
●● Common Vulnerability Scoring System (CVSS)
Answer: A standardized framework for assessing the severity of
vulnerabilities in computing systems which provides a numerical score
that reflects the characteristics and impacts of a vulnerability in terms of
three metric groups: Base, Temporal, and Environmental.
●● Vulnerability Manager Workspace
Answer: A Workspace which provides a unified view of all
vulnerabilities and enables users to create watch topics, remediation
efforts, and remediation tasks.
●● Remediation Effort
Answer: A static set of Vulnerable Items (VIs) associated with a Watch
Topic.
●● Watch Topic [sn_vul_watch_topic]
, Answer: A record in the Vulnerability Response application which
monitors Vulnerable Items that meet a specified filter criteria (the
"Vulnerable Item Condition") and facilitates creating a Remediation
Effort.
●● Vulnerability Exception Request
Answer: A record created from a VI that requires approval and generates
a deferral record if approved.
●● Remediation Plan
Answer: A high-level document or strategy that outlines the approach to
address identified vulnerabilities.
●● Remediation Task [sn_vul_app_vulnerability] [sn_vul_vulnerability]
Answer: A record in a table which extends the Task [task] table and
represents an assigned action to fix one or more Vulnerable Items (VI).
●● Security Champion
Answer: The persona that communicates between application developers
and the security operations team in the Application Vulnerability
Response application.
●● Exposure Assessment
GUIDE COMPLETE QUESTIONS AND
SOLUTIONS
●● role
Answer: A record in the sys_user_role table that can be assigned to users
or groups and grants permissions like create, read, update, delete.
●● Vulnerable Item (VI)
Answer: A unique combination of a vulnerability, configuration item,
and integration instance.
●● Remediation Task (RT)
Answer: A specific action or set of actions assigned to address and
resolve one or more Vulnerability Item(s).
●● Security Integration Framework application
Answer: The application that allows for the ingestion of data from third-
party security tools and facilitates real-time data updates from multiple
security sources.
●● Vulnerability Admin
,Answer: The persona that has complete access to the entire Vulnerability
Response application.
●● Vulnerability Solutions Management application
Answer: The application that helps identify appropriate remediation
solutions based on the types of vulnerabilities detected.
●● Common Weakness Enumeration (CWE) weakness
Answer: A condition in a software, firmware, hardware, or service that
could introduce vulnerabilities and has been assigned an ID (e.g.,
"CWE-798"), name, description, and applicable platforms by the
MITRE corporation.
●● Common Vulnerability and Exposure (CVE) entry
Answer: A publicly reported vulnerability in a specific product version
that has been assigned an identification number and description by
MITRE corporation.
●● Vulnerability Entry [sn_vul_entry]
Answer: A record imported from external sources such as the National
Vulnerability Database and the Qualys Knowledgebase which describes
a hardware or software weakness with an id, risk score, and summary.
●● Vulnerability Calculator
,Answer: A record in the table sn_vul_calculator_group which assesses
the risk associated with individual Vulnerability Entries and calculates
severity scores.
●● Rollup Calculator [sn_vul_rollup]
Answer: A record that assigns risk score to individual Vulnerable Items
(VI) by aggregating risk information from all the Vulnerability Entries
linked to the VI.
●● Common Vulnerability Scoring System (CVSS)
Answer: A standardized framework for assessing the severity of
vulnerabilities in computing systems which provides a numerical score
that reflects the characteristics and impacts of a vulnerability in terms of
three metric groups: Base, Temporal, and Environmental.
●● Vulnerability Manager Workspace
Answer: A Workspace which provides a unified view of all
vulnerabilities and enables users to create watch topics, remediation
efforts, and remediation tasks.
●● Remediation Effort
Answer: A static set of Vulnerable Items (VIs) associated with a Watch
Topic.
●● Watch Topic [sn_vul_watch_topic]
, Answer: A record in the Vulnerability Response application which
monitors Vulnerable Items that meet a specified filter criteria (the
"Vulnerable Item Condition") and facilitates creating a Remediation
Effort.
●● Vulnerability Exception Request
Answer: A record created from a VI that requires approval and generates
a deferral record if approved.
●● Remediation Plan
Answer: A high-level document or strategy that outlines the approach to
address identified vulnerabilities.
●● Remediation Task [sn_vul_app_vulnerability] [sn_vul_vulnerability]
Answer: A record in a table which extends the Task [task] table and
represents an assigned action to fix one or more Vulnerable Items (VI).
●● Security Champion
Answer: The persona that communicates between application developers
and the security operations team in the Application Vulnerability
Response application.
●● Exposure Assessment
