IBM Security AppScan Source Edition Implementation 認定 C2150-810 試験問題:

1. What is the function of the Correlated Security Issues report in AppScan Enterprise?

A) It is used by a security expert to investigate complex findings.
B) It displays the correlated issues between static analysis and dynamic analysis.
C) It tracks progress of an application during a specified period of time.
D) It displays the correlated issues between glass box analysis and dynamic analysis.

2. You want to scan and bundle the results for a Java application and only have access to one machine. Which two components must be installed on that machine to execute a scan and bundle the results?

A) AppScan Enterprise Server
B) AppScan Source for Analysis
C) AppScan Source for Development
D) AppScan Source for Automation
E) AppScan Source for Remediation

3. Which task allows users to specify a Web Context Root for each generated project using Ounce/Ant?

A) ounce.project_name
B) ounceCreateProject
C) ounce.build.compiler
D) ounceCli

4. You are reviewing a thick client application and come upon File Injection findings in a function that opens zip files and extracts data from them, but the customer you are working with tells you that the data is sanitized using a method mySanitizer.validateZip{..). You confirm this and decide to remove this vulnerability and other File injection findings with sanitized data using the Remove functionality of the Trace section in the Filter Editor.
In which area of the Trace Rule Entry dialog would you add mySanitizer.validateZip(..) method?

A) Sink section
B) Prohibited Calls section
C) Required Calls section
D) Source section

5. Which license is required for any AppScan Source deployment?

A) IBM Security AppScan Source for Developer license
B) IBM Security AppScan Source for Automation license
C) IBM Security AppScan Enterprise Server license
D) IBM Security AppScan Source Core Server license

質問と回答：