C2150-199 IBM Security AppScan Standard Edition Implementation v8.7

PDF question preview Back to product

Reading controls

Reader tools

Free demo

9 of 55 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice6

Multiple choice3

IBM · C2150-199

Free C2150-199 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

Why is it important that error pages are correctly defined?

A
IBM Security AppScan Standard Edition cannot handle redirection without correctly defined error pages.
B
IBM Security AppScan Standard Edition cannot maintain session state without correctly defined error pages.
C
If IBM Security AppScan Standard Edition understands the application's request is an error, it can more properly pass or fail certain tests.
D
If IBM Security AppScan Standard Edition understands the application's response is an error, it can more properly pass or fail certain tests.

Reveal answer details Close answer details

Correct answerD

Question 2

Multiple choice

What are two acceptable methods to protect sensitive user data?

A
Hashing
B
URL Encoding
C
DES Encryption
D
AES Encryption
E
Base 64 Encoding

Reveal answer details Close answer details

Correct answersB, E

Question 3

Single choice

Where would you configure sequence variables?

A
In Visual Studio
B
In a configuration file using a text editor
C
In the Tools > Options > Multi-Step Operations screen
D
In the Scan Configuration > Parameters and Cookies screen

Reveal answer details Close answer details

Correct answerC

Question 4

Multiple choice

Which three statements are true about configuring an IBM Security AppScan Standard Edition test policy?

A
A test policy can be searched.
B
A test policy cannot be changed.
C
A test policy contains error page definitions.
D
A test policy can be grouped by its OWASP classification.
E
A test policy contains advisory information about each test.
F
A test policy can be configured to include or exclude test variants.

Reveal answer details Close answer details

Correct answersA, C, F

Question 5

Single choice

Which statement is true about Privilege Escalation?

A
It requires only one scan to be run.
B
It can be detected by inadvertently triggered security issues.
C
IBM Security AppScan Standard Edition cannot perform Privilege Escalation.
D
Scans being compared must have the same scan configuration and equivalent explore data.

Reveal answer details Close answer details

Correct answerD

Question 6

Single choice

Which situation presents a valid reason for reducing the severity of vulnerability?

A
A Medium severity Link Injection vulnerability should be reduced when it only occurs on a login page.
B
A High severity SQL Injection vulnerability should be reduced when the affected database is read only.
C
A High severity Cross-Site Scripting vulnerability is confirmed to be a Reflected XSS and would require user authentication to be exploited.
D
A High severity Unencrypted Login Request vulnerability should be reduced when the application is using a database that is encrypted with Triple DES (Data Encryption Standard) and a 168 bit key.

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

What is HTTP Authentication?

A
A way of authenticating users using headers
B
Transport level authentication using certificates
C
A way of authenticating users using a html form
D
The process of verifying HTTP responses for security issues

Reveal answer details Close answer details

Correct answerB

Question 8

Single choice

How can IBM Security AppScan Standard Edition automatically create a navigation structure?

A
By reading the site map
B
By analyzing web server responses
C
By following manual explore steps to build
D
By analyzing breadcrumbs and extrapolating content

Reveal answer details Close answer details

Correct answerA

Question 9

Multiple choice

Which three report templates are available in a Security Report?

A
QA
B
Complete
C
Developer
D
High severity
E
Trending Data
F
Executive Summary

Reveal answer details Close answer details

Correct answersD, E, F