C2150-199試験無料問題集（55題）「IBM Security AppScan Standard Edition Implementation v8.7 認定」

出題：1

You just updated the error page for the application. When will that update affect the scan results?

A. After the next time you open the scan

B. After you click "Apply to Current Results"

C. Immediately

D. After the next scan of the same application

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which tab contains the button to replicate a test?

A. Advisory

B. Request/Response

C. Issue Information

D. Fix Recommendation

正解：B 解答を投票する

出題：3

What is HTTP Authentication?

A. Transport level authentication using certificates

B. The process of verifying HTTP responses for security issues

C. A way of authenticating users using a html form

D. A way of authenticating users using headers

正解：A 解答を投票する

出題：4

Where would you configure AppScan to identify itself, and the exact stage of the scan, in each HTTP request?

A. Custom Headers identify as AppScan

B. Custom Headers > Include AppScan debug headers in all requests

C. Advanced Custom Parameters > Include AppScan debug headers in all requests

D. Advanced Configuration View > Include AppScan debug headers in all requests

正解：D 解答を投票する

出題：5

An AppScan user captured the following URLs during a recorded login:
http://www.altoromutual.com/ http://www.altoromutual.com/login.jsp http://www.altoromutual.com/doLogin https://www.altoromutual.com/bank/main.jsp
The same user selected an in-session detection pattern of "Hello John Smith".
Given that the "Hello John Smith" string only appears on the in-session page (main.jsp).
Will AppScan be able to stay in-session and successfully scan the application?

A. No. the in-session page is HTTPS and cannot be interpreted by AppScan.

B. Yes, AppScan will send the request for the in-session page and detect the in-session pattern.

C. Yes, AppScan does not check the in-session pattern as a means of validating the session.

D. No, the in-session detection pattern needs to appear on every page of the application.

正解：B 解答を投票する

出題：6

What is the simplest method of determining the coverage of a scan configuration, without running a full scan?

A. Generate a Delta Analysis Report

B. Run a Manual Explore

C. Run an Automatic Explore

D. Run the Connection Test tool

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

C2150-199試験無料問題集「IBM Security AppScan Standard Edition Implementation v8.7 認定」