IBM C2150-139 Online Practice Questions and Exam Preparation

IBM C2150-139 Online Questions & Answers

• Question 1:

  What information does reasoning displayed in the Request / Response tab provide?

  A. how to avoid this type of issue
  B. whyAppScan concluded that there is an issue
  C. howAppScan constructed the test
  D. why this issue causes non-compliance
  B. whyAppScan concluded that there is an issue

• Question 2:

  Which statement is true about network firewalls preventing Web application attacks?

  A. Network firewalls cannot prevent attacks because ports 80 and 443 must be open.
  B. If configured properly, network firewalls can prevent attacks.
  C. Network firewalls cannot prevent attacks because it is too complex to configure.
  D. Network firewalls can prevent attacks because they can detect malicious HTTP traffic.
  A. Network firewalls cannot prevent attacks because ports 80 and 443 must be open.

• Question 3:

  Which three actions should you take if your application requires form-based authentication? (Choose three.)

  A. record a login sequence
  B. configure platform authentication
  C. configure client-side certificates
  D. ensure that in-session detection is enabled and properly configured
  E. ensure that all session tokens are being tracked
  F. reduce the number of threads to one
  A. record a login sequence
  D. ensure that in-session detection is enabled and properly configured
  E. ensure that all session tokens are being tracked

• Question 4:

  To construct a test, AppScan changed an HTTP request by removing the File CFileand First_name parameters and changing the value of the Email_address mail_address parameter to ">"> Which type of vulnerability is AppScan testing for?

  A. SQL Injection
  B. XPath Injection
  C. Cross-site Scripting
  D. Possible Server Path Disclosure Found
  C. Cross-site Scripting

• Question 5:

  In which three areas does AppScan test for vulnerabilities?

  A. the network layer, the web application, the web server
  B. the operating system, the web application platform, the database
  C. the web application, the web server, the web application platform
  D. the web application platform, the network layer, the web server
  C. the web application, the web server, the web application platform

• Question 6:

  AppScanreported a large number of idden files, which you know do not exist on your Web server. What is the likely cause?

  A. You did not define a custom error page.
  B. AppScan created all these files on the server.
  C. You did not exclude third-party domains.
  D. Somebody put the files on the server.
  A. You did not define a custom error page.

• Question 7:

  Which username/passwords combination would NOT be reported as predictable by AppScan?

  A. admin/admin
  B. johnr/Na2acrA
  C. user1/password
  D. johnr/nascar
  B. johnr/Na2acrA

• Question 8:

  You are scanning a Web site in a pre-production environment. You notice that your scan is running very slowly and there are numerous communication errors. What would you do to resolve the problem?

  A. increase the number of threads and decrease the timeout limit
  B. decrease the number of threads and increase the timeout limit
  C. increase the number of threads and increase the timeout limit
  D. set the timeout to 0 for infinite timeout
  B. decrease the number of threads and increase the timeout limit

• Question 9:

  AppScan belongs to which category of vulnerability assessment tools?

  A. Host Scanners
  B. Network Scanners
  C. Black-Box Scanners
  D. White-Box Scanners
  C. Black-Box Scanners

• Question 10:

  Which lines in an HTTP response would trigger a positive result from an AppScan test for a vulnerability of type Possible Server Path Disclosure Pattern Found?

  C. d:\backup\website\oldfiles
  D. ./images/header/ibm/logoBigBlue.jpg
  C. d:\backup\website\oldfiles