QUALYS-VMDR Practice Test

QUALYS-VMDR practice test: what's covered

• Qualys Cloud Platform
• Cloud Agent
• TruRisk
• Patch Management

Free QUALYS-VMDR sample questions

1. The Qualys Cloud Platform is BEST described as:

   • A. A single on-prem appliance
   • B. A cloud-based platform with multiple integrated apps (VMDR, CSAM, PM, etc.) sharing one normalized asset/data model, fed by distributed sensors (scanners, agents, connectors)
   • C. A firewall OS
   • D. A backup service
   Show answer

   Correct: B. Qualys is a unified cloud platform — many apps over one shared data model and sensor fabric. VMDR orchestrates the full lifecycle (inventory → assess → prioritize → patch) using that shared data.

2. Which TWO are valid Qualys sensors? (Choose 2)

   • A. Scanner Appliance (virtual or physical) for active network scanning
   • B. Cloud Agent installed on the host
   • C. BGP route reflector
   • D. A fax sensor
   Show answer

   Correct: A and B. Qualys sensors: Scanner Appliances (network scans), Cloud Agents (host-resident), Cloud/API connectors, Passive Sensor, Container Sensor, Out-of-Band sensors. BGP/fax are not sensors.

3. A Scanner Appliance is needed when you want to:

   • A. Install software on every host
   • B. Perform network-based (often unauthenticated or authenticated remote) scanning of targets — including devices where you cannot install an agent (network gear, printers, appliances)
   • C. Configure BGP
   • D. Replace the Cloud Agent for laptops
   Show answer

   Correct: B. Scanner Appliances do the remote/network perspective and reach agentless devices. Cloud Agents cover OS hosts from within. Most mature programs run BOTH for complete coverage.

4. A Scanner Appliance must reach the Qualys Cloud Platform to:

   • A. Advertise BGP
   • B. Pull its configuration / scan jobs and push results back — it communicates outbound to the platform; targets are scanned on the internal network
   • C. Replace DNS
   • D. Serve web pages
   Show answer

   Correct: B. The appliance dials home (outbound) to fetch jobs and return data; no inbound exposure needed. It scans targets reachable on its local network segment. Place appliances near the assets they scan.

5. A Passive Sensor in Qualys is used to:

   • A. Actively scan
   • B. Passively analyze network traffic (via a SPAN/TAP) to discover and classify assets — including unmanaged / rogue devices — without sending probes
   • C. Deploy patches
   • D. Configure BGP
   Show answer

   Correct: B. The Passive Sensor sniffs traffic to find assets the active scans miss (transient, rogue, unmanaged). Great for shadow-IT discovery and continuous inventory between active scans.

Last updated: 2026-10-19

QUALYS-VMDR practice test FAQ