C2150-211 IBM Security AppScan DAST V9.0.1 Fundamentals

Test information:
Number of questions: 60
Time allowed in minutes: 90
Required passing score: 63%
Languages: English, French, Latin American Spanish, Portuguese (Brazil)

Related certifications:
IBM Certified Associate – Security AppScan DAST V9.0.1

The test consists of seven sections containing a total of approximately 60 multiple-choice questions. The percentages after each section title reflect the approximate distribution of the total question set across the sections.

Section 1 – Key Concepts of AppScan DAST V9.0.1 (7%)
Describe dynamic testing.
Compare dynamic versus static testing.
Describe the basic requirements to run a scan.

Section 2 – AppScan DAST V9.0.1 Components (17%)
Describe the generic service client (GSC).
Differentiate between AppScan Standard and AppScan Enterprise.
Describe the DAST scanner.
Describe installation and basic use of the manual explore tool.
Describe the AppScan power tools.
Describe glass box and its functionality.
Describe automatic updates.

Section 3 – AppScan DAST Testing and Methodology (20%)
Describe phases of a scan.
Describe in-session detection.
Describe types of tests.
Describe testable elements.
Describe explore coverage.
Describe how AppScan identifies an issue.

Section 4 – Basics of Application Security (12%)
Describe the need for dynamic application security testing.
Describe common vulnerability types.
Describe basic concept of input validation.

Section 5 – Scan configuration (18%)
Describe login management.
Describe scan options.
Describe test policies.
Demonstrate knowledge of explore options.
Demonstrate understanding of limiting the scope of a scan.

Section 6 – Triage Results / Issue Management and Reporting (18%)
Identify key or necessary triage tasks for DAST.
Describe importing results from other sources.
Demonstrate understanding of resolving false negatives and false positives.
Demonstrate understanding of available reports and options.
Describe accessing report results.
Demonstrate understanding of issue classification.

Section 7 – Basic Troubleshooting (8%)
Describe how to enable logging.
Describe troubleshooting scan consistency.
Describe monitoring scan progress.

IBM Certified Associate – Security AppScan DAST V9.0.1

Job Role Description / Target Audience
This entry level certification is intended for individuals who know the fundamental concepts of IBM Security AppScan DAST V9.0.1.
These individuals have hands-on experience with the product by performing day-to-day basic to intermediate level tasks in the areas of:
1. Key Concepts of AppScan DAST V9.0.1
2. AppScan DAST V9.0.1 Components
3. AppScan DAST Testing and Methodology
4. Basics of Application Security
5. Scan configuration
6. Triage Results / Issue Management and Reporting
7. Basic Troubleshooting

To attain the IBM Certified Associate – AppScan DAST V9.0.1, candidates must pass 1 test. To gain additional knowledge and skills, and prepare for this test based on the job role and test objectives, take the link to the test below, and refer to the Test Preparation tab.

Click here to view complete Q&A of C2150-211 exam
Certkingdom Review, Certkingdom PDF C2150-211