C2150-199 Real Exam Questions and Verified Answers

Question 1 Multiple choice

What are two acceptable methods to protect sensitive user data?

A
Hashing
B
URL Encoding
C
DES Encryption
D
AES Encryption
E
Base 64 Encoding

Show answer and explanation

Correct answers: B, E

Question 2 Single choice

In the Automatic Form Fill window, if the URL field is blank for a particular row, which value will be passed for that row's parameter?

A
Blank
B
That row's parameter value
C
The parameter will be skipped.
D
The value of the "Fill unknown fields with" box

Show answer and explanation

Correct answer: B

Question 3 Single choice

The starting URL is: http://www.mysite.com/myfolder/index.aspx. You want to restrict the scan to thefolder:http://www.mysite.com/myfolder/.

How should you configure the scan?

A
1. Add an Exclude item with path http://www.mysite.com/myfolder/2. Add an Exception item below the Exclude item, with the path of the folder to be scanned:http://www.mysite.com/
B
1. Add an Exception item with path http://www.mysite.com/myfolder/2. Add an Exclude item below theExclude item, with the path of the folder to be scanned:http://www.mysite.com
C
1. Add an Exclude item with path http://www.mysite.com/2. Add an Exception item below the Exclude item, with the path of the folder to be canned:http://www.mysite.com/myfolder/
D
1. Add an Exception item with path http://www.mysite.com/2. Add an Exclude item below the Excludeitem, with the path of the folder to be scanned:http://www.mysite.com/myfolder/

Show answer and explanation

Correct answer: B

Question 4 Multiple choice

Which three environment definitions are options in Scan Configuration?

A
Type of Site
B
Browser Type
C
System Memory
D
Application Server
E
Deployment Method
F
Database Character Set

Show answer and explanation

Correct answers: A, D, E

Question 5 Single choice

You need a template-based report of all the issue ID and variants found by a scan.

How should you create this?

A
«AS:lssueTypeRepeaterStart» «AS:lssueRepeaterStart» «AS:VariantlD» «AS:VariantTestRequest»
«AS:lssueRepeaterEnd» «AS:lssueTypeRepeaterEnd»
B
«AS:lssueTypeRepeaterStart» «AS:VariantlD» «AS:VariantTestRequest»
«AS:lssueTypeRepeaterEnd»
C
«AS:lssueTypeRepeaterStatt» «AS:RemediationRepeaterStart» «AS:VariantlD»
«AS:VariantTestRequest» «AS:RemediationRepeaterEnd» «AS:lssueTypeRepeaterEnd»
D
«AS:lssueTypeRepeaterStart» «AS:VuInerableRepeaterStart» «AS:VariantlD»
«AS:VariantTestRequest» «AS:VulnerableRepeaterEnd» «AS:IssueTypeRepeaterEnd»

Show answer and explanation

Correct answer: A

Question 6 Multiple choice

Which two login methods allows you to create a login sequence?

A
None
B
Prompt
C
Recorded
D
Multi-step
E
Automatic

Show answer and explanation

Correct answers: B, C

Question 7 Multiple choice

Which three finding types can the IBM Security AppScan Standard Edition malware module identify?

A
Link Injections
B
Broken external links
C
Unwanted internal links
D
Malicious external links
E
Unwanted external links
F
Unclassified external links

Show answer and explanation

Correct answers: D, E, F

Question 8 Single choice

The application you are testing contains links to external websites. You want to restrict the scan to the
designated web application URL.

Which configuration option should you use?

A
Enable Scan only links in and below this directory.
B
Add links to external website to the Exclude Paths list.
C
AppScan automatically identifies the website during a test.
D
Edit the hosts file to map the production website to the test website.

Show answer and explanation

Correct answer: A

Question 9 Single choice

Which statement is true about Privilege Escalation?

A
It requires only one scan to be run.
B
It can be detected by inadvertently triggered security issues.
C
IBM Security AppScan Standard Edition cannot perform Privilege Escalation.
D
Scans being compared must have the same scan configuration and equivalent explore data.

Show answer and explanation

Correct answer: D

Question 10 Single choice

In the Redundancy tuning of Parameters and Cookies view, the following option is disabled,
- Explore the URL again whenever this parameter/cookie is added or removed.

A
...page.jsp will not be explored
...page.jsp?thisParam=Value will be explored
B
...page.jsp will be explored
...page.jsp?thisParam=Value will be explored
C
...page.jsp will be explored
...page.jsp?thisParam=Value will not be explored
D
...page.jsp will not be explored
...page.jsp?thisParam=Value will not be explored

Show answer and explanation

Correct answer: A