QUALYS VMDR TRAINING EXAM/ACTUAL EXAM
QUESTIONS AND CORRECT DETAILED
ANSWERS WITH RATIONALES/NEWEST
UPDATE
Save
Terms in this set (24)
a wekness that cybercriminals can exploit to gain
access to a system
What is a vulnerability
it is estimated that every 1000 lines of code contains
one bug, and 25 if it is not scrutinized.
to proactively detect and eliminate vulnerabilities to
reduce overall security risk and prevent exposure.
what is vulnerability
Vulnerability Management (VM) means
management
systematically and continuously finding and
eliminating vulnerabilities in your computer systems
Scoping (asset discovery) Systems to Identify
Inventory
-Always begin asset scoping with internet-facing
assets
YOU CANNOT PROTECT AND SECURE WHAT YOU
what is the first and most
DONT KNOW
importnt step for laying
the foundation of a
This step includes organizing your computer
successful VM program.
systems according to their role, to establish an
evaluation baseline.
--This starts with directing vulnerability scanners to a
certian range of IP addresses.
, One way to scan remote users is to ensure they are
connected to your VPN and scanning them over the
tunnel, assuming the network and VPN can handle
the traffic.
The better solution is an agent-based approach.
how to scan remote users
Scanning is performed by a local agent that runs on
the host machine and provides the information
necessary to evaluate the security state of the
machine, with little effect on processing, memory,
and bandwidth.
Automate as much as possible
-Manual intervention should be limited only to
prioritize patches and negotiate the proper window
to apply those patches.
Tips for effective VM
Use VM technology with a solid track record and
wide use
Remember to select a solution that can change with
the business and grow accordingly
fast implementation, low maintenance, and pay-as-
you-go
Benefits of a cloud based
A cloud provider handles all the technical 'heavy
software
lifting' of infrastructure behind the application. You
can use it right away without requiring special
technical expertise or training to deploy and use it.
Open source
-free but not inexpensive (you must front the cost of
maintenance, training, and staffing)
3 main types of VM Corporate/commercial
software -Safer, but has a real cost. Better training available
Cloud alternative based
-more flexible, faster to implement, low
maintenance cost
QUESTIONS AND CORRECT DETAILED
ANSWERS WITH RATIONALES/NEWEST
UPDATE
Save
Terms in this set (24)
a wekness that cybercriminals can exploit to gain
access to a system
What is a vulnerability
it is estimated that every 1000 lines of code contains
one bug, and 25 if it is not scrutinized.
to proactively detect and eliminate vulnerabilities to
reduce overall security risk and prevent exposure.
what is vulnerability
Vulnerability Management (VM) means
management
systematically and continuously finding and
eliminating vulnerabilities in your computer systems
Scoping (asset discovery) Systems to Identify
Inventory
-Always begin asset scoping with internet-facing
assets
YOU CANNOT PROTECT AND SECURE WHAT YOU
what is the first and most
DONT KNOW
importnt step for laying
the foundation of a
This step includes organizing your computer
successful VM program.
systems according to their role, to establish an
evaluation baseline.
--This starts with directing vulnerability scanners to a
certian range of IP addresses.
, One way to scan remote users is to ensure they are
connected to your VPN and scanning them over the
tunnel, assuming the network and VPN can handle
the traffic.
The better solution is an agent-based approach.
how to scan remote users
Scanning is performed by a local agent that runs on
the host machine and provides the information
necessary to evaluate the security state of the
machine, with little effect on processing, memory,
and bandwidth.
Automate as much as possible
-Manual intervention should be limited only to
prioritize patches and negotiate the proper window
to apply those patches.
Tips for effective VM
Use VM technology with a solid track record and
wide use
Remember to select a solution that can change with
the business and grow accordingly
fast implementation, low maintenance, and pay-as-
you-go
Benefits of a cloud based
A cloud provider handles all the technical 'heavy
software
lifting' of infrastructure behind the application. You
can use it right away without requiring special
technical expertise or training to deploy and use it.
Open source
-free but not inexpensive (you must front the cost of
maintenance, training, and staffing)
3 main types of VM Corporate/commercial
software -Safer, but has a real cost. Better training available
Cloud alternative based
-more flexible, faster to implement, low
maintenance cost
