R7-INSIGHTVM Practice Test

R7-INSIGHTVM practice test: what's covered

• InsightVM
• Security Console
• Scan Engine
• Insight Agent
• Real Risk

Free R7-INSIGHTVM sample questions

1. InsightVM is BEST described as:

   • A. A firewall
   • B. Rapid7's vulnerability management solution — combining an on-prem/cloud Security Console + distributed Scan Engines + Insight Agents, with cloud-powered analytics (Insight platform) for risk prioritization
   • C. A backup tool
   • D. An email gateway
   Show answer

   Correct: B. InsightVM = Console (management) + Scan Engines (active scanning) + Insight Agents (continuous host data) + the Insight cloud platform (analytics, Liveboards, projects). It evolved from Nexpose with added cloud capabilities.

2. The vulnerability management lifecycle that InsightVM supports is best summarized as:

   • A. Scan once and forget
   • B. Discover assets → Assess vulnerabilities → Prioritize by risk → Remediate → Verify/Report — a continuous loop
   • C. Backup, restore, archive
   • D. Buy, install, renew
   Show answer

   Correct: B. Continuous lifecycle: discover (sites/agents), assess (scans), prioritize (Real Risk), remediate (projects), verify (rescan/agent) and report (Liveboards). Not a one-shot scan.

3. Which TWO are goals of a risk-based VM program in InsightVM? (Choose 2)

   • A. Prioritize remediation using Real Risk (exploitability, malware, age) not just raw CVSS
   • B. Continuously reduce the organization's risk exposure and track it on Liveboards
   • C. Patch in CVE-number order
   • D. Replace the firewall
   Show answer

   Correct: A and B. Risk-based VM = prioritize what matters (Real Risk) and measure reduction over time (Liveboards/Goals). Patching by CVE number or replacing firewalls misses the point of intelligent prioritization.

4. The Insight platform (cloud) adds which capability on top of the on-prem Console?

   • A. Nothing
   • B. Cloud-powered features like Liveboards, Remediation Projects, Insight Agent data aggregation, and Query Builder / dashboards — extending on-prem scanning with cloud analytics
   • C. BGP routing
   • D. A patch repository only
   Show answer

   Correct: B. The Insight cloud platform powers Liveboards, Remediation Projects, Goals & SLAs, and Insight Agent telemetry. The Console connects to Insight to unlock these. It is the analytics/collaboration layer.

5. "You cannot remediate what you have not discovered" emphasizes which phase?

   • A. Reporting
   • B. Discovery — comprehensive asset discovery (sites + agents + connections) is the foundation; unknown assets are unmanaged risk
   • C. Verification
   • D. Prioritization
   Show answer

   Correct: B. Discovery first. InsightVM discovers via scan sites, Insight Agents, and connections (e.g., cloud, DHCP, AD). Gaps in discovery = blind spots that never get assessed or fixed.

Last updated: 2026-10-19

R7-INSIGHTVM practice test FAQ