Examsoon.com  The World Renowned  IT Certification Material Provider Exam : HP HP0-M25 Title : Assessing Web Application Security Version : Demo Examsoon.com  The World Renowned  IT Certification Material Provider  Important Note, Please Read Carefully  Other examsoon products  All examsoon IT Exam Products  Our products of Offline Testing Engine  Use the offline Testing engine product to practice the questions in an exam environment.  Build a foundation of knowledge which will be useful also after passing the exam.  examsoon Testing Engine  Guarantee  Examsoon provides the most competitive quality of all exams for the customers, we guarantee your  success at the first attempt with only our Certification Question&Answers, if you do not pass the exam at  the first time, we will not only arrange FULL REFUND for you, but also provide you another exam of your  claim, ABSOLUTELY FREE!.  Features  1.  Comprehensive questions with complete details  2.  Instant Downloadable in PDF form.  3.  Verified Answers Researched by Industry Experts  4.  Questions accompanied by exhibits  5.  Drag and Drop questions as experienced in the Actual Exams.  6.  These questions and answers are backed by our GUARANTEE.  7.  Questions updated on regular basis.  8.  Like actual certification exams our product is in multiple­choice questions (MCQs). ExamSoon.com  The World Renowned  IT Certification Material Provider  Help you pass any IT Exams 1. What are the Network Authentication techniques supported by WebInspect? (Select three.) A. NTLM B. Kerberos C. htaccess D. Cybersafe E. HTTP Basic F. Retinal Scan Answer: ABE 2. What is the difference between a Login Macro and a Start Macro? Select two. A. The Start Macro will run any time state needs to be re-established. B. The Start Macro is used to populate the assessment with known URLs. C. The Login Macro runs any time a page response matches its logout signature. D. The Login Macro only runs once to gain session state at the beginning of the assessment. E. The Start Macro is the Login Macro being forced to run once at the beginning of the assessment. Answer: BC 3. Which is a valid option for Log File Purge settings under Application Settings? A. Purge When Exit B. By Total Scan Size C. By Log File Number D. Purge on SmartUpdate Answer: C 4. Which policy focuses on auditing the functionality of the Web Application only? A. Standard policy B. Application policy C. Web Service policy D. Web Application policy Answer: B ExamSoon.com  The World Renowned  IT Certification Material Provider  Help you pass any IT Exams 5. What are some uses of regular expressions in WebInspect? Select two. A. They are used for response filtering and may be customized. B. They are used for filtering the vulnerabilities in the Dashboard. C. They are used for detecting the logout signature in a Login Macro. D. They are used for defect reporting when WebInspect is linked to Quality Center. E. They are used to group vulnerabilities in the Vulnerabilities tab in the Summary pane. Answer: AC 6. Which statement best describes the role of the "Web Form Values" file? A. The WebForm Values file is part of the standard policy. B. The WebForm Values file is generated during a scan to capture test parameters used during the scan. C. The WebForm Values file contains parameter names and provides static values to be submitted when testing webforms. D. The WebForm Values file is used to establish and maintain "state" with the application by monitoring webform authentication methods. Answer: C 7. What is a logout signature? A. a snapshot of the session state found when the user has lost session state B. a regular expression used to identify those responses that indicate session state has been lost C. the toolbar feature in Web Macro Recorder which automatically determines the macros regular expression D. a user-supplied keyword that will be inserted into the WebInspect scan data to indicate each response where a logout occurred Answer: B 8. Which statement best describes SmartUpdate? A. SmartUpdate is the process that delivers WebInspect Messages to the bottom of the Home tab. B. SmartUpdate is the feature that sends False Positives (FP) to the HP Support team as quality feedback. ExamSoon.com  The World Renowned  IT Certification Material Provider  Help you pass any IT Exams C. SmartUpdate is a process that retrieves updates to the local vulnerability database and any WebInspect binary updates. D. SmartUpdate automatically omits security checks whose specified server/application type does not match the current targetsb server/application fingerprint. Answer: C 9. After completing a Crawl-Only scan and clicking on the Audit button, which scan policy will be used? A. the policy selected by the user on-screen B. the policy listed in the Default Scan Settings C. the policy specified in the Application Settings D. the policy specified in the Current Scan Settings Answer: A 10. Which tool is used to create and edit the Web Form Values file? A. HTML Editor B. HTTP Editor C. Web Form Editor D. WebInspect Form Wizard Answer: C 11. Which macro option will play and then start the scan off at its last recorded session, and none of the earlier sessions will be crawled and audited? A. Start Macro B. Login Macro C. Logout Macro D. Use macro for entry Answer: D 12. Which option best describes a Manual Crawl (Step Mode) scan? A. This scan spiders the website, discovering all links and pages therein. ExamSoon.com  The World Renowned  IT Certification Material Provider  Help you pass any IT Exams B. This scan forces the user to provide all of the site pages by hand via their browser while the audit performs attacks. C. This scan discovers links/pages while attacking the same pages, running with multiple threads. A recursion setting allows new items discovered in the attack phase to be spidered further. D. This scan fully discovers the site structure first, followed by a phase of attacks of the same pages. A recursion setting allows new items discovered in the attack phase to be spidered further. Answer: B 13. Which regular expression best matches the string 345-12-9876? A. \d B. \d*.$ C. \d{3-2-4} D. \d{3}-\d{2}-\d{4} Answer: D 14. Which statement best describes the Request Retry Count function? A. The Request Retry Count indicates how long to wait for a response. B. The Request Retry Count indicates how long to wait before re-requesting the same, non-responsive page. C. The Request Retry Count indicates how many times to attempt a request before marking it as a null response. D. The Request Retry Count indicates how much time WebInspect will spend on a request before marking the requested page as a null response. Answer: C 15. By default, what are the three response codes that would halt a scan on the first request? A. 404, 407, 502 B. 200, 302, 404 C. 304, 302, 500 D. 403, 404, 500 ExamSoon.com  The World Renowned  IT Certification Material Provider  Help you pass any IT Exams Answer: A Examsoon.com was founded in 2006. The safer,easier way to help you pass any IT Certification  exams . We provide high quality IT Certification exams practice questions and answers(Q&A).  Especially  Adobe,  Apple,  Citrix,  Comptia,  EMC,  HP,  Juniper,  LPI,  Nortel,  Oracle,  SUN,  Vmware  and so on. And help you pass any IT Certification exams at the first try.  we guarantee your success at the first attempt with only our Certification Question&Answers,  if you do not pass the exam at the first time, we will not only arrange FULL REFUND for you,  but also provide you another exam of your claim, ABSOLUTELY FREE!  You can reach us at any of the email addresses listed below.  E­MAIL:  examsoon(at)hotmail.Com  Examsoon.com  The World Renowned  IT Certification Material Provider