If the machine in question has Java 6.x installed the normal security patching will only install 6.x patches. It will not upgrade the Java version to 7.x.
That's what I thought too. However, following each weekly automatic patch update, this computer has again had Java 7.0 and we've had to uninstall it. We've done it three times now.
You can create a patch group in conjunction with a custom scan template to exclude certain patches.
1. Create a patch group either containing, A. only the patches you want to scan for, or B. patches you don't want to be scanned for.
2. Create a custom scan template (Templates > New Template > Patch Scan). You can then add your patch group to be used for filtering. This is on the Filtering tab under Patch filter settings. If you used option A above choose to "Scan Seletected", or for option B above choose "Skip Selected". Then across from Patch group(s), click the "..." button and choose the patch group you created.
Note: Make sure you select any applicable Patch Types that you want to include under "Patch type filter settings".
3. Scan using this custom patch scan template. It should now scan based on your patch group.