IBM C2150-139 Online Practice Questions and Exam Preparation

IBM C2150-139 Online Questions & Answers

• Question 21:

  Which defense is most reliable in protecting a Web application from being hacked?

  A. set up an application firewall
  B. use SSL encryption
  C. set up an Intrusion Detection System
  D. write secure code
  D. write secure code

• Question 22:

  After scanning your site with AppScan, you notice that your password was changed to 234. What most likely happened?

  A. One of theAppScan tests hacked your account and changed the password.
  B. AppScan followed the Reset Password link.
  C. AppScan submitted the change password form.
  D. Your system admin changed your password during the scan.
  C. AppScan submitted the change password form.

• Question 23:

  What information does difference displayed in the Request / Response tab provide?

  A. the difference between two tests
  B. how the vulnerability was resolved
  C. howAppScan constructed the test HTTP request
  D. how the Web application page has been modified from its previous version
  C. howAppScan constructed the test HTTP request

• Question 24:

  Where can you find details about a test AppScan executed during a scan?

  A. in the Application Data view
  B. in the Request/Response view
  C. in the Original HTTP Traffic view
  D. in the Fix Recommendation view
  B. in the Request/Response view

• Question 25:

  Your site contains the following URL: http://www.mycompany.com/smb/default.jsp?page=wireless In this URL, the Page parameter defines a unique page. How would you configure AppScan to fully explore this site?

  A. turn off Redundant Path limit
  B. ensure JavaScript Execute is turned on
  C. ignore the Page parameter
  D. track the Page parameter
  A. turn off Redundant Path limit

• Question 26:

  What is indicative of Information Leakage vulnerability?

  A. When the user logs in, hello, username!is displayed.
  B. The exception call stack is displayed.
  C. The message incorrect username or password!is displayed.
  D. The message script error: Please contact the Web site administrator!is displayed.
  B. The exception call stack is displayed.

• Question 27:

  Which type of parameters does AppScan manipulate when testing a .Net Web Service

  A. JSON parameters
  B. All custom parameters
  C. SOAP parameters
  D. POST parameters
  C. SOAP parameters

• Question 28:

  When can an injection type attack occur?

  A. when the database is set up on a server outside the demilitarized zone
  B. when an error message is generated by the Web server
  C. when user-supplied data is sent to an interpreter as part of a command, query, or data
  D. when too many users have ADMIN credentials to the Web server console
  C. when user-supplied data is sent to an interpreter as part of a command, query, or data

• Question 29:

  How does an attacker exploit Web application vulnerabilities?

  A. by hacking the firewall
  B. by installing viruses on a usermachineby installing viruses on a user? machine
  C. by sending malicious HTTP requests
  D. by sniffing the traffic between a user and the Web server
  C. by sending malicious HTTP requests

• Question 30:

  Which type of vulnerability allows an attacker to execute a malicious script in a user browser?

  A. Cross-site Scripting
  B. Injection Flaw
  C. Insecure Direct Object Reference
  D. Failure to restrict URL access
  A. Cross-site Scripting