IBM C2150-810 考試概覽:

認證廠商:	IBM
考試名稱:	IBM Security AppScan Source Edition 實作
考試代碼:	C2150-810
支援語言:	English
考試形式:	情境導向題, 選擇題, 拖放式操作題
實際考試題數:	50 - 60
相關認證:	IBM Certified Deployment Professional - Security
及格分數:	70%
考試費用:	約 200 美元（依地區有所不同）
考試時間:	90 分鐘
證照有效期限:	3 年
推薦課程:	IBM 訓練與技能資源 IBM Security AppScan Source Edition 技術文件
考試報名:	Pearson VUE IBM 考試預約 IBM 認證考試報名
範例考題:	IBM C2150-810 範例考題
考試方式:	線上遠端監考（OnVUE）或於 Pearson VUE 授權考場實地應考
必備條件:	無強制先修資格；建議具備 IBM Security AppScan Source Edition 實務操作經驗與應用程式安全相關知識
官方大綱網址:	https://www.ibm.com/certify/exams/C2150-810

IBM C2150-810 考試大綱主題:

章節	權重	目標
主題 1: 架構與規劃	20%	- 系統需求與規模評估 - 授權模式與部署架構 - 瞭解 AppScan Source Edition 的組成元件
主題 2: 結果分析與弱點管理	20%	- 篩選、分類與標記弱點項目 - 解讀掃描結果與風險等級 - 與缺陷追蹤系統進行整合 - 自訂追蹤分析與檢測規則
主題 3: 報表製作與系統管理	10%	- 產生與匯出報表 - 常見問題的診斷與排除 - 備份、回復與日常維護作業
主題 4: 掃描設定與執行	25%	- 支援的程式語言與開發框架 - 建立與配置掃描專案 - 設定掃描規則與規則集 - 透過圖形介面與命令列執行掃描作業
主題 5: 安裝與設定	25%	- 與整合開發環境（IDE）的連接設定 - 安裝伺服器與用戶端元件 - 設定資料庫與安全性選項 - 建立使用者角色與權限配置

最新的 IBM Certified Deployment Professional C2150-810 免費考試真題：

問題 #1

When reviewing an application, you discover methods that are not called directly by the application.
Which rule should be applied in order to scan this code?

A. Add the method as tainted call back.
B. Add the method as not a validation routine.
C. Add the method as taint propagator.
D. Add the method as source.

答案：B

問題 #2

When scanning a .NET application, an error is reported. AppScan indicates that source information is not available for a given assembly.
What must be done to fix the error?

A. The .NET application must include manifest data.
B. Visual Studio must be configured for Release Mode.
C. The PDB file for the given assembly must be included in the source directory.
D. AppScan Source for Analysis must be configured to scan assembly project types.

答案：D

問題 #3

What can be enabled to scan android.xml manifest files which are not scanned by default when configuring a Java mobile application?

A. Custom Rules
B. Project Dependencies
C. JSP Compiler
D. Scan Rules

答案：A

問題 #4

Which view in the Visual Studio IDE Plugin allows a user to focus on results in which they are interested?

A. Customer Rules View
B. Define Variables View
C. Trace View
D. Filters View

答案：D

說明：（僅 VCESoft 成員可見）

問題 #5

You are reviewing an application and come across a method called doSomething() that can be executed by other systems to provide data to the application via this method's
parameters.
Which type of custom rule do you need to create for AppScan Source to properly capture this data?