HP Assessing Web Application Security - HP0-M25 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

When evaluating a vulnerability within the WebInspect GUI, where would you find a full description of the vulnerability, including recommended remediation steps?

A. Information Pane -> Vulnerability view B. Summary Pane -> Server Information tab C. Summary Pane -> Information tab D. Report -> QA Summary option

Discussion 0

Correct Answer: A Vote an answer

Question 2

When using the Search view in WebInspect, which is the most comprehensive way to search an HTTP response?

A. Response Headers B. Response Raw C. Request Raw D. Response Cookies

Discussion 0

Correct Answer: B Vote an answer

Question 3

Which tool can be used to extract data from a backend database by manipulating the raw HTTP request parameters in a vulnerable application?

A. HTTP Editor B. SQL Injector C. Web Brute D. Web Proxy

Discussion 0

Correct Answer: B Vote an answer

Question 4

By default, what are the three response codes that would halt a scan on the first request?

A. 403, 404, 500 B. 304, 302, 500 C. 404, 407, 502 D. 200, 302, 404

Discussion 0

Correct Answer: C Vote an answer

Question 5

What is one way to determine the GUID, or scan name, associated with a particular scan?

A. Open the Scan and look at the Scan Properties. B. Find the folder where scan data is stored and find the correct scan file. C. Open the Scan and look at Scan ID in Scan Log . D. Run the Scan Statistics report on the scan.

Discussion 0

Correct Answer: C Vote an answer

Question 6

Which statement best describes the Web Form Values file?

A. The WebForm Values file must always be redefined prior to executing a scan when using custom policies. B. The WebForm Values file contains only usernames and passwords to be used during the scan. C. The WebForm Values file is only necessary when not using a web macro during a scan. D. The WebForm Values file contains parameters and associated values that are applied to a matching parameter name on a page.

Discussion 0

Correct Answer: D Vote an answer

Question 7

Which statement best describes the difference between a secure network infrastructure and a secure web application?

A. A secure network infrastructure involves SSL communication and locked down application servers while a secure web application safely handles invalid user input. B. A secure network infrastructure involves limiting the open network ports while a secure web application ensures the use of port 443 and permits HTTPS traffic only. C. A secure network infrastructure involves limiting the open network ports while a secure web application ensures the web site is only accessible via a single port. D. A secure network infrastructure involves firewalls and IDS while a secure web application is one that does not connect to any back-end databases.

Discussion 0

Correct Answer: A Vote an answer

Question 8

What tools can be used to create a Start Macro? Select two.

A. HTTP Editor B. Web Macro Recorder C. Regex Editor D. Macro Wizard E. Web Proxy

Discussion 0

Correct Answer: B,E Vote an answer