IBM Security AppScan Source Edition Implementation 認定 C2150-810 試験問題:

1. Which features are provided by the AppScan Source for Analysis?

A) It is used to run scans, triage findings and generate filters and reports.
B) It is used by security teams to run scans and build integration.
C) It is used for report generation and unattended scans.
D) It is used to run scans and upload them to QRadar.

2. You are reviewing an on-line shopping application and find a lost sink method called generateltemNotFoundMessage() provided by a third-party shopping framework. This method returns a search string that was passed in. prepended with an "item not found" message in English, French or Spanish (depending on user's selection).
Which type of custom rule do you need to create for this method?

A) Sink
B) Source
C) Not Susceptible to Taint
D) Tainted Callback
E) Taint Propagator

3. Which two methods can be used to resolve Unresolved Include Expressions?

A) Adding additional directories that contain PHP include files to the include path
B) Adding additional search and replace rules
C) Adding additional PHP Document Roots to the project
D) Adding additional source files in the project properties menu
E) Adding additional Scan Rules

4. Which feature is available in the AppScan Source IDE Plugin?

A) View Trace Information for a given finding
B) Create Custom Rules
C) Generate PDF reports
D) Create scan configurations

5. What is the function of the Correlated Security Issues report in AppScan Enterprise?

A) It displays the correlated issues between static analysis and dynamic analysis.
B) It is used by a security expert to investigate complex findings.
C) It tracks progress of an application during a specified period of time.
D) It displays the correlated issues between glass box analysis and dynamic analysis.

質問と回答：