C2150-810 by IBM Valid Free Exam Practice Test

Question 1

Which two methods can be used to resolve Unresolved Include Expressions?

A. Adding additional source files in the project properties menu B. Adding additional directories that contain PHP include files to the include path C. Adding additional Scan Rules D. Adding additional search and replace rules E. Adding additional PHP Document Roots to the project

Correct Answer: B,E

Question 2

Which two components are required to install AppScan Enterprise Server with reporting?

A. AppScan Standard B. Team Foundation Server C. Internet Information Services D. DB2 E. Microsoft SQL Server

Correct Answer: A,D

Question 3

You are reviewing a thick client application and come upon File Injection findings in a function that opens zip files and extracts data from them, but the customer you are working with tells you that the data is sanitized using a method mySanitizer.validateZip(..). You confirm this and decideto remove this vulnerability and other File Injection findings with sanitized data using the Remove functionality of the Trace section in the Filter Editor.
What do you need to do in the Trace Rule Entry dialog to ensure that the rule you create applies only to this application's zip extractor and not all File Inclusion findings?

A. Specify Sink method name. B. Add validateZipO to the Prohibited Calls section. C. Add validateZipO to the Required Calls section. D. Specify File Inclusion as Source property. E. Specify File Inclusion as Sink property.

Correct Answer: E

Question 4

When reviewing an application, you discover methods that are not called directly by the application.
Which rule should be applied in order to scan this code?

A. Add the method as taint propagator. B. Add the method as not a validation routine. C. Add the method as source. D. Add the method as tainted call back.

Correct Answer: B

Question 5

You are reviewing an online shopping application and find a lost sink method called combineltemListsf..,) that is provided by a third-party shopping framework. This method combines two lists of items (provided as arguments) into one.
Which type of custom rule do you need to create for this method?

A. Taint Propagator B. Sink C. Tainted Callback D. Source E. Not Susceptible to Taint

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

IBM Security AppScan Source Edition Implementation - C2150-810 Exam Practice Test