Qualys Patch Management (PM) Exam
Which sections of the PM application, provide you with the ability to create a patch job? (choose 3)(Choose all that apply) (A) ASSETS (B) CONFIGURATION (C) PATCHES (D) JOBS
(A) ASSETS (B) CONFIGURATION (C) PATCHES
Which of the following conventions can be used to include or assign host assets to a job? (choose 2) (Select all that apply) (A) Asset Name (B) Asset Group (C) Business Unit (D) Asset Tag
(A) Asset Name (D) Asset Tag
What type of assets appear in the ASSETS section of the Qualys Patch Management application? (choose 2) (Choose all that apply) (A) Assets with the PM module activated (B) Only assets that have already been scanned (C) Assets running the Qualys Cloud Agent (D) Only assets that have already been patched
(A) Assets with the PM module activated (B) Only assets that have already been scanned
Which of the following frequencies, can be used to schedule a Deployment Job? (choose 3) (Choose all that apply) (A) Daily (B) Annually (C) Weekly (D) Monthly
(A) Daily (C) Weekly (D) Monthly
Which of the following tasks are performed by a patch assessment scan? (choose 2) (A) Discover patches already installed (B) Install or deploy missing patches (C) Uninstall existing patches (D) Discover missing patches
(A) Discover patches already installed (D) Discover missing patches
Assets can be added to: (choose 3) (A) On Demand jobs that are disabled (B) On Demand jobs that are enabled (C) Recurring jobs that are enabled (D) Recurring jobs that are disabled
(A) On Demand jobs that are disabled (C) Recurring jobs that are enabled (D) Recurring jobs that are disabled
Which Qualys technology provides a patch download cache, to achieve a more efficient distribution of downloaded patches, to local agent host assets? (A) Qualys Gateway Server (B) Qualys Passive Sensor (C) Qualys Scanner Appliance (D) Qualys Connector
(A) Qualys Gateway Server
Patches can be added to: (choose 3)(Choose all that apply) (A) Recurring jobs that are disabled (B) On Demand jobs that are disabled (C) Recurring jobs that are enabled (D) On Demand jobs that are enabled
(A) Recurring jobs that are disabled (B) On Demand jobs that are disabled (C) Recurring jobs that are enabled
What is the minimum "Cache size" setting, recommended for Windows Updates? (A) 512 MB (B) 2048 MB (C) 256 MB (D) 1024 MB
(B) 2048 MB
Which of the following PM setup steps must be completed, before host patch assessments can begin? (choose 3) (Choose all that apply) (A) Assign host to a PM Job (B) Activate PM module on host (C) Assign host to an enabled PM Assessment Profile (D) Assign host to CA Configuration Profile (with PM enabled)
(B) Activate PM module on host (C) Assign host to an enabled PM Assessment Profile (D) Assign host to CA Configuration Profile (with PM enabled)
Which of the following are options for prioritizing vulnerabilities, in a VMDR Prioritization Report? (choose 3) (Choose all that apply) (A) Compliance Posture (B) Attack Surface (C) Vulnerability Age (D) Real-Time Threat Indicator (RTI)
(B) Attack Surface (C) Vulnerability Age (D) Real-Time Threat Indicator (RTI)
Application and OS patching are available for hosts running the Qualys __________ __________ . (A) Passive Sensor (B) Cloud Agent (C) Scanner Appliance (D) Virtual Scanner
(B) Cloud Agent
Which of the following are methods for activating the PM module on a Qualys agent host? (choose 3) (Choose all that apply) (A) Select the "Activate for FIM or IOC or PM" option for a host, in the Cloud Agent application. (B) Deploy the agent with an Activation Key that has the PM module selected. (C) Use the Qualys Cloud Agent API, to activate the PM module for a single agent or agents in bulk. (D) Add agent host assets to a PM Asset Group.
(B) Deploy the agent with an Activation Key that has the PM module selected. (C) Use the Qualys Cloud Agent API, to activate the PM module for a single agent or agents in bulk. (D) Add agent host assets to a PM Asset Group.
Which of the following tasks are performed by a Qualys patch job? (choose 2) (Choose all that apply) (A) Discover patches already installed (B) Install or deploy missing patches (C) Uninstall existing patches (D) Discover missing patches
(B) Install or deploy missing patches (C) Uninstall existing patches
Which of the following Qualys applications or services, provide the ability to create a patch job? (choose 3) (Choose all that apply) (A) PC (B) PM (C) VMDR (D) VM
(B) PM (C) VMDR (D) VM
The __________ process is responsible for installing and uninstalling patches, included in patch jobs you create. (A) stdeploy.exe (B) Qualys Cloud Agent (C) notify.exe (D) Qualys Cloud Agent UI
(B) Qualys Cloud Agent
Patching messages and notifications are managed by the __________ process. (A) Qualys Cloud Agent (B) Qualys Cloud Agent UI (C) stdeploy.exe (D) notify.exe
(B) Qualys Cloud Agent UI
By default, any PM host that is not assigned to a specific Assessment Profile, will be assigned to the __________ Profile. (A) Global (B) System (C) Public (D) Initial
(B) System
What does it mean, when a patch is displayed with a "key-shaped" symbol? (A) The patch is a key requirement for the deployment of other patches. (B) The patch cannot be downloaded by Qualys Cloud Agent. (C) The patch has been deprecated. (D) The patch cannot be uninstalled.
(B) The patch cannot be downloaded by Qualys Cloud Agent.
When creating a patch job, a "Patch Window" set to the __________ option, will allow the Cloud Agent as much time as it needs to complete the job. (A) Complete (B) Unlimited (C) None (D) Full
(B) Unlimited
From the PATCHES section in the Patch Management application, which query produces a list of "uninstallable" patches? (A) uninstall:true (B) isRollback:true (C) uninstall:false (D) isRollback:false
(B) isRollback:true
When creating a new Deployment Job (in the Patch Management application), which query will produce a list of patches that have not been superseded? (A) notSuperseded:false (B) isSuperseded:false (C) notSuperseded:true (D) isSuperseded:true
(B) isSuperseded:false
Which of the following statements about Qualys Patch Management's "patch sources" is false? (A) Patches are originally acquired from Vendor Global CDNs. (B) Digital signatures and hash values are used to validate downloaded patches. (C) A VPN connection to your corporate network is required to download patches. (D) Both operating system and application patches are provided.
(C) A VPN connection to your corporate network is required to download patches.
Additional assets or patches can be added to any existing patch job: (A) Once the job has been approved (B) After the job has completed (C) Before the job is enabled (D) Before the job begins to run
(C) Before the job is enabled
Additional assets can be added to a(n) __________ job, both before and after it has been enabled. (A) On-Demand (B) Uninstall (C) Recurring (D) Run-Once
(C) Recurring
Presently, you can add a maximum of _____ patches to a single job. (A) 1250 (B) 1750 (C) 1500 (D) 2000
(D) 2000
The current status of any job can be monitored using the ____________ option from its "Quick Actions" menu. (A) View Details (B) Edit (C) Enable (D) view Progress
(D) view Progress
Using the "Search" field (found in the VULNERABILITIES section of the VM Dashboard), which query will produce a list of "patchable" vulnerabilities? (A)vulnerabilities.vulnerability.qualysPatchable:TRUE (B)vulnerabilities.vulnerability.qualysPatchable:FALSE (C)vulnerabilities.vulnerability.isPatchable:FALSE (D)vulnerabilities.vulnerability.isPatchable:TRUE
(D)vulnerabilities.vulnerability.isPatchable:TRUE
Within a PM Assessment Profile, what is the minimum value, for patch assessment frequency? (A) 24 hours (B) 4 hours (C) 12 hours (D) 1 hour
(A) 24 hours
To consume a patching license, one or more host ________ ________ must be added to the "Licenses" tab (within the Patch Management application). (A) Business Units (B) Asset Groups (C) Asset Names (D) Asset Tags
(D) Asset Tags
Qualys Patch Management, provides tools and services needed to complete the "Response" phase of the Qualys _______ Lifecycle. (A) WAS (B) PM (C) VM (D) VMDR
(D) VMDR
Which query token can be used to display patches that cannot be downloaded by Qualys' Cloud Agent? (A) agentDownload (B) isDownload (C) qualysDownload (D) downloadMethod
(D) downloadMethod
