IBM C2150-199 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Analyzing and Reporting Results | 16% | - Exporting and sharing results - Reviewing vulnerability findings - Validating and prioritizing issues - Generating and customizing reports |
| Topic 2: Scan Setup and Configuration | 50% | - Defining scan targets and environments - Authentication and login management - Performance and optimization settings - Test policy selection and customization - Scan scope and exclusion rules |
| Topic 3: Application Testing and Execution | 9% | - Monitoring scan progress - Troubleshooting scan failures - Running different scan types |
| Topic 4: Installation and Licensing | 4% | - Installation procedure - System requirements - License configuration and management |
| Topic 5: Advanced Features and Maintenance | 8% | - Updating security rules and signatures - Managing application profiles - Best practices for ongoing use |
| Topic 6: Exploration and Manual Testing | 13% | - Handling complex application flows - Automated vs manual exploration - Form filling and session management |
IBM Security AppScan Standard Edition Implementation v8.7 Sample Questions:
Question #1
Which three reports layout options are available?
A. Background color
B. Font size
C. Report title
D. Report type
E. Font type
F. Company logo
Question #2
An AppScan user captured the following URLs during a recorded login:
http://www.altoromutual.com/ http://www.altoromutual.com/login.jsp http://www.altoromutual.com/doLogin https://www.altoromutual.com/bank/main.jsp
The same user selected an in-session detection pattern of "Hello John Smith".
Given that the "Hello John Smith" string only appears on the in-session page (main.jsp).
Will AppScan be able to stay in-session and successfully scan the application?
A. No, the in-session detection pattern needs to appear on every page of the application.
B. No. the in-session page is HTTPS and cannot be interpreted by AppScan.
C. Yes, AppScan will send the request for the in-session page and detect the in-session pattern.
D. Yes, AppScan does not check the in-session pattern as a means of validating the session.
Question #3
You are reviewing scan results and find that for several pages your site returned 5xx Server Error response in a form of custom error page. As a result, several False Positive findings were reported.
How should you remove this kind of False Positive findings?
A. Configure AppScan to exclude this page from the scan.
B. Right-click the security issue and choose the Report False Positive option.
C. Right-click the security issue and lower the Severity level to Low.
D. Configure AppScan to recognize such a page as an error page.
Question #4
An application server stops responding when you run AppScan scan against it but appears to work normally when you manually browse the site after the scan stops.
What should you do to fix this issue?
A. Lower the response time by which AppScan waits for your application to reply.
B. Lower the number of threads AppScan tests with.
C. Change the browser agent.
D. Run the scan when there is less network traffic.
Question #5
Upon reviewing the URLs that IBM Security AppScan Standard Edition discovered during an automatic explore, you find that the registration success page was not discovered while the registration page itself was.
Which tool allows you to resolve this issue?
A. Multiphase Explore
B. Legacy Explore
C. Web service Explore
D. Manual Explore
Solutions:
| Question #1 Correct Answer: A,C,E | Question #2 Correct Answer: C | Question #3 Correct Answer: B | Question #4 Correct Answer: B | Question #5 Correct Answer: D |
727 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
