VMDR practice examsIn development
Qualys Vulnerability Management, Detection and Response
Running a vulnerability programme rather than a scan: building the inventory, scanning with credentials so the results mean something, prioritising by real risk rather than by score, and closing findings in a way that survives review.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Asset inventory, scanning and vulnerability detection | Not published |
| Prioritisation, remediation and reporting | Not published |
Two sample questions
1. What does integrating with a ticketing system support?
- Tracking remediation through to completion — correct
- Considerably faster scanning of the estate
- Longer retention of the findings
- Automatic approval of exceptions
Why: A finding without an owner and a date rarely gets fixed.
2. What does the platform correlate agent and scan data into?
- No record
- Two records
- One asset record — correct
- A theme under normal use
Why: Data is correlated into a single asset record.
The real VMDR exam
| Length | 75 minutes |
|---|---|
| Questions | 75 |
| Pass mark | 75% |
| Price | Free with Qualys training |
| Recommended before you sit it | None. Qualys provides free training and a trial subscription. |
| Valid for | 2 years |
Exam facts as published by Qualys; always check the vendor’s page before you book.
Study VMDR with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.