C2150-199 Exam Training Practice Tests (IBM Security AppScan Standard Edition Implementation v8.7)]

Question 1

Which type of attack relies on an authenticated user to click a malicious link to perform an unintended action on the target application?

A. Cross-site request forgery B. Cross-site scripting C. Directory traversal D. SQL injection

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which tab contains the button to replicate a test?

A. Fix Recommendation B. Advisory C. Request/Response D. Issue Information

Correct Answer: C

Question 3

How do you remove sensitive information from the scan logs?

A. Disable scan logs B. Use the Customize Scan Log to disable sensitive information C. Enable Sanitize logs in advanced configuration D. Disable request/response logging

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which three environment definitions are options in Scan Configuration?

A. System Memory B. Deployment Method C. Application Server D. Browser Type E. Database Character Set F. Type of Site

Correct Answer: B,C,F

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

What information is available when a vulnerability is discovered via traditional dynamic testing (i.e. not via Glassbox testing or JavaScript analysis)?

A. Fix recommendation B. Automatic code correction button C. Directory and file location of the affected code D. Line number of the affected code

Correct Answer: C

Question 6

Which two types of reports allow a user to import a custom .asreg file to specify a user-defined template?

A. Industry standard report B. Template based report C. Regulatory compliance report D. Security report E. Delta analysis report

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

IBM Security AppScan Standard Edition Implementation v8.7 - C2150-199 Exam Practice Test