Pass with professional C2150-199 actual quiz materials

IBM C2150-199 Exam Overview:

IBM C2150-199 Exam Syllabus Topics:

IBM Security AppScan Standard Edition Implementation v8.7 Sample Questions:

1. An AppScan user captured the following URLs during a recorded login:
http://www.altoromutual.com/ http://www.altoromutual.com/login.jsp http://www.altoromutual.com/doLogin https://www.altoromutual.com/bank/main.jsp
The same user selected an in-session detection pattern of "Hello John Smith".
Given that the "Hello John Smith" string only appears on the in-session page (main.jsp).
Will AppScan be able to stay in-session and successfully scan the application?

A) Yes, AppScan does not check the in-session pattern as a means of validating the session.
B) Yes, AppScan will send the request for the in-session page and detect the in-session pattern.
C) No. the in-session page is HTTPS and cannot be interpreted by AppScan.
D) No, the in-session detection pattern needs to appear on every page of the application.

2. Which situation presents a valid reason for reducing the severity ofvulnerability?

A) A High severity Unencrypted Login Request vulnerability should be reduced when the application is using a database that is encrypted with Triple DES (Data Encryption Standard) and a 168 bit key.
B) A Medium severity Link Injection vulnerability should be reduced when it only occurs on a login page.
C) A High severity Cross-Site Scripting vulnerability is confirmed to be a Reflected XSS and would require user authentication to be exploited.
D) A High severity SQL Injection vulnerability should be reduced when the affected database is read only.

3. An application server stops responding when you run AppScan scan against it but appears to work normally when you manually browse the site after the scan stops.
What should you do to fix this issue?

A) Lower the number of threads AppScan tests with.
B) Change the browser agent.
C) Run the scan when there is less network traffic.
D) Lower the response time by which AppScan waits for your application to reply.

4. The scan log shows "out of session" detection and the AppScan keeps failing to re-login to the application during the scan. Then you find the login account is locked out by the system due to multiple fail attempts.
How do you resolve this?

A) Reset the login sequence
B) Disable the testing login/logout pages
C) Reset the in-session pattern
D) Set "Prompt" login method under Login management

5. Where would you configure AppScan to identify itself, and the exact stage of the scan, in each HTTP request?

A) Advanced Configuration View > Include AppScan debug headers in all requests
B) Custom Headers identify as AppScan
C) Advanced Custom Parameters > Include AppScan debug headers in all requests
D) Custom Headers > Include AppScan debug headers in all requests

Solutions: