Free HP HP2-W103 Exam Dumps Questions & Answers

What is the goal of HP Fortify's Software Security Suite?

• A.  Find security vulnerabilities in any type of software, fix security flaws in source code before it ships, and prepare perimeter defense systems with an application context.
• B.  Find security vulnerabilities in Web applications, upload findings to ArcSight EMS SIEM, and block the intruder at the gate.
• C.  Detect security vulnerabilities during exploitation by using Runtime, upload findings to ArcSight EMS SIEM, and block the intruder at the gate.
• D.  Find security vulnerabilities in any type of software, fix security flaws in source code before it ships, and protect applications against attacks in production.

A prospect calls and says, "I want to bring our dynamic testing in-house." What is the appropriate solution?

• A.  Fortify Consultant license for SCA + Weblnspect
• B.  Fortify On Demand (FoD)
• C.  Static Code Analyzer (SCA)
• D.  Weblnspect

Which level of coverage does HP Fortify Runtime provide to an application?

• A.  security application monitoring through a span port on a switching device of a server farm
• B.  security application monitoring through a shim technology to monitor the OSI stack of a server
• C.  security application monitoring, logging, and protection without modification
• D.  performance application monitoring, testing, and prevention with minimal modification

What is HP Fortify Software Security Center?

• A.  a flexible repository and reporting platform for security status, trending, and compliance
• B.  an application built on the HP Anywhere platform for monitoring user server activities across networks, domains, and regions
• C.  an onsite-only collaboration solution for reducing overhead of development teams
• D.  a native integration with ArcSight and TippingPoint for blocking and logging security activity events

What is the meaning of IAST in the HP Fortify Software Security suite?

• A.  Integrated Application Security Testing
• B.  Intermittent Advanced Self-Testing
• C.  Interactive Application Security Testing
• D.  Integrated Application Software Testing