1.
What is the simplest method of determining the coverage of a scan configuration, without running a full scan?
2.
Why is it important to define error pages in IBM Security AppScan Standard Edition?
3.
Why is it important that error pages are correctly defined?
4.
What is the goal of a sidejacking web application attack?
5.
Which tab contains the button to replicate a test?
6.
The scan log shows "out of session" detection and the AppScan keeps failing to re-login to the application during the scan. Then you find the login account is locked out by the system due to multiple fail attempts. How do you resolve this?
7.
Which three finding types can the IBM Security AppScan Standard Edition malware module identify?
8.
What are the two main functions of the Parameters and Cookie view?
9.
Which statement is true about an IBM Security AppScan Standard Edition test policy?
10.
Which log file would be useful in verifying whether or not a particular security test was executed during a test?