HP HP2-W103 Online Practice Questions and Exam Preparation

HP HP2-W103 Online Questions & Answers

• Question 1:

  What is the meaning of IAST in the HP Fortify Software Security suite?

  A. Integrated Application Security Testing
  B. Intermittent Advanced Self-Testing
  C. Integrated Application Software Testing
  D. Interactive Application Security Testing
  A. Integrated Application Security Testing

• Question 2:

  What is a standard question to ask during the HP Fortify qualification process for new clients?

  A. Which programming languages do you use?
  B. Which intrusion detection system do you use?
  C. Which VOIP and PBX systems do you use?
  D. Which browser does your customer use?
  A. Which programming languages do you use?

• Question 3:

  What is the goal of HP Fortify's Software Security Suite?

  A. Find security vulnerabilities in any type of software, fix security flaws in source code before it ships, and protect applications against attacks in production.
  B. Find security vulnerabilities in any type of software, fix security flaws in source code before it ships, and prepare perimeter defense systems with an application context.
  C. Find security vulnerabilities in Web applications, upload findings to ArcSight EMS SIEM, and block the intruder at the gate.
  D. Detect security vulnerabilities during exploitation by using Runtime, upload findings to ArcSight EMS SIEM, and block the intruder at the gate.
  A. Find security vulnerabilities in any type of software, fix security flaws in source code before it ships, and protect applications against attacks in production.

• Question 4:

  Which defect management system is among the default integrations with HP Fortify solutions?

  A. BugTracker.NET
  B. GitHub
  C. SourceForge
  D. HPALM
  A. BugTracker.NET

• Question 5:

  Where should the bulk of the content appear in a proposal?

  A. Scope
  B. About
  C. Proposal Overview
  D. Problem Statement
  B. About

• Question 6:

  What is the security approach that HP ESP adopted from Lockheed-Martin's Computer Emergency Response Team to disrupt the adversary?

  A. the Kill Chain
  B. the Destructor
  C. the Internal Emergency Response Team
  D. Detect it; Contain it, Stop it
  A. the Kill Chain

• Question 7:

  Which opportunity type often uses Customization Services to ensure success?

  A. Fortify on Demand
  B. Product-Intensive
  C. Strategic/Full Solution
  D. Tactical
  B. Product-Intensive

• Question 8:

  A prospect calls and says; "Developers are complaining that our security testing occurs too late in the SDLC, disrupting/delaying the releases." What is the appropriate solution?

  A. Weblnspect
  B. Fortify Consultant license for SCA + Weblnspect
  C. Fortify On Demand (FoD)
  D. Static Code Analyzer (SCA)
  D. Static Code Analyzer (SCA)

• Question 9:

  Where does HP Fortify Software Security address security?

  A. in the testing phase
  B. in production
  C. in the coding phase
  D. across the application lifecycle
  A. in the testing phase

• Question 10:

  Who are the most important cyber threat adversaries of modern time? (Select three.)

  A. cyber criminals
  B. spammers
  C. nation states
  D. script kiddies
  E. hacktivists
  F. competitors
  A. cyber criminals
  C. nation states
  E. hacktivists