IBM Security AppScan Source Edition Implementation Sample Questions:

1. Which view in the Visual Studio IDE Plugin allows a user to focus on results in which they are interested?

A) Customer Rules View
B) Trace View
C) Define Variables View
D) Filters View

2. Your customer is a small-sized development company. They would like AppScan Source to be used by a security team of 2 people and a development team of 6 people.
Which server license would be recommended for this organization?

A) AppScan Enterprise Server Basic
B) AppScan Source for Automation
C) AppScan Source Server Core
D) AppScan Enterprise Server

3. When scanning .NET assemblies, what is the likely cause of missing line of code information from the findings?

A) The version of Visual Studio used to develop the application and corresponding projects is not installed in the scanning environment.
B) msdia80.dll is not present and registered on the file system.
C) A valid Visual Studio solution file (.sin) is not present on the file system and in the same directory as the .NET assembly files.
D) pdb files are not generated and present with complete debug info for each target executable or DLL configured in the scan.

4. Which two AppScan Source components can be used to generate reports?

A) AppScan Source for Remediation
B) AppScan Source for Automation
C) AppScan Source for Analysis
D) AppScan Source for Core
E) AppScan Source for Developer

5. You are reviewing an application and come across a method called doSomething() that can be executed by other systems to provide data to the application via this method's
parameters.
Which type of custom rule do you need to create for AppScan Source to properly capture this data?

A) Source
B) Not Susceptible to Taint
C) Tainted Callback
D) Sink
E) Taint Propagator

Solutions: