IBM Security AppScan Source Edition Implementation - C2150-810 Exam Practice Test

You are scanning a thick client application that receives data over a custom TCP/IP protocol provided by the application's framework method AppComm.getReceivedMessage().
Which rule would you create for this method to capture and trace the incoming data?

What is the proper action to take if the attack surface proves to be insufficient?

Which two components are required to install AppScan Enterprise Server with reporting?

You are analyzing a client-server application that has "thick" clients that run on Windows and Android. You come across several Remote Command Execution findings with data originating from several different Sources. The customer you are working with is worried about the developers pushing back on low priority findings, so you need to remove those originating from sources that pose the lowest risk.
Which Sources pose the lowest risk?

Your customer is a small-sized development company. They would like AppScan Source to be used by a security team of 2 people and a development team of 6 people.
Which server license would be recommended for this organization?