HP Assessing Web Application Security 認定 HP0-M25 試験問題:

1. Which state will be established once you have successfully authenticated to a Web site?

A) Normal state
B) Secure state
C) Session state
D) Balance state

2. What are the differences between a Crawl-Only scan and an Audit-Only scan? Select two.

A) A Crawl-Only scan can always be audited after it completes.
B) An Audit-Only scan indicates the user crawled the pages by hand.
C) An Audit-Only scan will not discover any new pages.
D) A Crawl-Only scan cannot find any vulnerabilities, it only spiders the site structure.
E) A Crawl-Only scan is the same as an Audit-Only scan except that it uses a Start Macro.

3. What is the purpose of WebInspect Regular Expression Extensions?

A) They add location criteria to the regular expression.
B) They are used only when testing for SQL Injection in POST parameters.
C) They are used for formatting reports.
D) They match the syntactical characteristics of a set of data.

4. Which tool will you use to create a filter that can help identify every instance of a 302 redirection while browsing the web application?

A) SQL Injector
B) HTTP Injector
C) Web Browser
D) Web Proxy

5. Which statement best describes Smart Credentials in the Web Form Editor?

A) The values entered into a parameter designated as a Smart Credential will be encrypted during the scan.
B) Designating a parameter as a Smart Credential causes a user to be prompted for an input during the execution of the scan.
C) Smart Credentials will apply Authentication values used during the scan.
D) The values entered into a parameter designated as a Smart Credential allow WebInspect to use digital certificates to authenticate to the server.

質問と回答：