C2150-199問題集、IBM実際の試験問題

質問 1

What is the simplest method of determining the coverage of a scan configuration, without running a full scan?

A. Run the Connection Test tool

B. Generate a Delta Analysis Report

C. Run an Automatic Explore

D. Run a Manual Explore

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which type of attack steals a user's session cookie after the user browses to a web forum?

A. Reflected XSS

B. Stored XSS

C. Mirrored XSS

D. DOMXSS

正解: D

質問 3

What information is available when a vulnerability is discovered via traditional dynamic testing (i.e. not via Glassbox testing or JavaScript analysis)?

A. Directory and file location of the affected code

B. Automatic code correction button

C. Line number of the affected code

D. Fix recommendation

正解: A

質問 4

A user has recorded a login. AppScan is still reporting an out-of-session error during testing.
What should the user check to correct the issue?

A. That the JavaScript Execution option has been enabled in scan configuration

B. That the login sequence was not recorded via HTTPS

C. That the in-session detection pattern has been identified correctly

D. That the application server has been identified in the environmental settings

正解: A

質問 5

Which authentication method is supported when IBM Security Authentication Tester PowerTool uses the "brute-force" technique to reveal weak username-password combinations that could be used to gain access to a web application?

A. HTTP

B. NTLM

C. SecurlD

D. Two-Factor

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

You just updated the error page for the application. When will that update affect the scan results?

A. After you click "Apply to Current Results"

B. After the next scan of the same application

C. After the next time you open the scan

D. Immediately

正解: A

解説: (PassTest メンバーにのみ表示されます)

IBM Security AppScan Standard Edition Implementation v8.7 - C2150-199 模擬練習