You are reviewing scan results and find that for several pages your site returned 5xx Server Error response in a form of custom error page. As a result, several False Positive findings were reported. How should you remove this kind…
In the Redundancy tuning of Parameters and Cookies view, the following option is disabled, – Explore the URL again whenever this parameter/cookie is added or removed. A. …page.jsp will not be explored…page.jsp?thisParam=Value will be explored B. …page.jsp will be explored…page.jsp?thisParam=Value…
An application server stops responding when you run AppScan scan against it but appears to work normally when you manually browse the site after the scan stops. What should you do to fix this issue? A. Change the browser agent.…
Which situation presents a valid reason for reducing the severity of vulnerability? A. A Medium severity Link Injection vulnerability should be reduced when it only occurs on a login page. B. A High severity SQL Injection vulnerability should be reduced…
Where can you configure Multi-Step Operations? A. Explore > Manual Explore B. Tools > Options > Multi-Step Operations C. Job Configuration > Multi-Step Operations D. Scan Configuration > Multi Step Operations
Where would you configure sequence variables? A. In Visual Studio B. In a configuration file using a text editor C. In the Tools > Options > Multi-Step Operations screen D. In the Scan Configuration > Parameters and Cookies screen
Which statement is true about Privilege Escalation? A. It requires only one scan to be run. B. It can be detected by inadvertently triggered security issues. C. IBM Security AppScan Standard Edition cannot perform Privilege Escalation. D. Scans being compared…
What are three parts of the Explore Options view? A. Click Depth Limit B. Use Client-Side Certificate C. Set the Number of Threads D. Use custom proxy settings E. Parse Flash to discover URLs F. Execute JavaScript when replaying login
In the Automatic Form Fill window, if the URL field is blank for a particular row, which value will be passed for that row’s parameter? A. Blank B. That row’s parameter value C. The parameter will be skipped. D. The…
Which three report templates are available in a Security Report? A. QA B. Complete C. Developer D. High severity E. Trending Data F. Executive Summary