ibm c2150-810
IBM Certified Deployment Professional C2150-810 : IBM Security AppScan Source Edition Implementation

C2150-810 Latest Exam Braindumps

Question 2: You are reviewing a thick client application and come upon File Injection findings in a function
that opens zip files and extracts data from them, but the customer you are working with tells you
that the data is sanitized using a method mySanitizer.validateZip(..). You confirm this and decideto
remove this vulnerability and other File Injection findings with sanitized data using the Remove
functionality of the Trace section in the Filter Editor.
What do you need to do in the Trace Rule Entry dialog to ensure that the rule you create applies only
to this application's zip extractor and not all File Inclusion findings?
A. Specify Sink method name.
B. Specify File Inclusion as Sink property.
C. Specify File Inclusion as Source property.
D. Add validateZipO to the Required Calls section.
E. Add validateZipO to the Prohibited Calls section.
Correct Answer: B