HP0-M25 無料問題集「HP Assessing Web Application Security」

（A）Server policy

（B）Platform policy

（C）Analysis policy

（D）Standard policy

（A）to perform a qualitative analysis by grading how well an application complies with certain government-mandated regulations or corporate-defined guidelines

（B）to conduct a preliminary examination of a Web site to determine if certain WebInspect settings should be modified

（C）to ensure that assessments are accurate and capable of detecting the most recently discovered threats

（D）to provide a comprehensive overview of your Web presence across the network enterprise

（A）save time by only visiting a limited number of page variations for any individual page

（B）visits the first 15 links on a page and stops

（C）lighten the load on the target host by throttling the WebInspect scan

（D）ensure that any single page will only be requested 15 times during the Crawl phase

（E）ensure that any single page will only be requested 15 times during the entire assessment

（A）Create a customized policy with only the Apache web server branch enabled, omitting all those checks that pertain to non-Apache servers.

（B）Add a Session Exclusion for the URL = /Manuals/.

（C）Specify a deep-linked folder in the Starting URL field. Enable the Restrict to Folder setting for that directory and all subdirectories.

（D）Enable the Smart Assessment feature so only Apache-centric checks will be sent.

（A）Retinal Scan

（B）Cybersafe

（C）NTLM

（D）HTTP Basic

（E）htaccess

（F）Kerberos

（A）The Match setting for a Web Form parameter qualifies the entry using the criteria; "Exact", "Starts With" or "Contains".

（B）The Match setting for a Web Form parameter resolves conflicts between web macro parameters and Web Form Values parameters.

（C）The Match setting for a Web Form parameter qualifies the entry using the criteria; "Exact", "Close" or "Close Enough".

（D）The Match setting for a Web Form parameter forces exact matches only of form names.

（A）192.23.39.9

（B）[email protected]

（C）[email protected]

（D）http://www.somesite.com/

（A）Report -> QA Summary option

（B）Summary Pane -> Information tab

（C）Summary Pane -> Server Information tab

（D）Information Pane -> Vulnerability view

（A）Identify the vulnerable parameter from HTTP Request and manually attack it.

（B）Copy the HTTP Request and paste into Internet Explorer.

（C）Right-click the vulnerability and select Reaudit.

（D）Right-click the vulnerability and select Tools -> SQL Injector.

（A）SmartUpdate automatically omits security checks whose specified server/application type does not match the current targets server/application fingerprint.

（B）SmartUpdate is the process that delivers WebInspect Messages to the bottom of the Home tab.

（C）SmartUpdate is the feature that sends False Positives (FP) to the HP Support team as quality feedback.

（D）SmartUpdate is a process that retrieves updates to the local vulnerability database and any WebInspect binary updates.