Which two languages can be scanned by the AppScan Source CLI?

• A. Fortran
• B. Haskell
• C. C++
• D. Java
• E. ActionScript

When scanning .NET assemblies, what is the likely cause of missing line of code information from the findings?

• A. pdb files are not generated and present with complete debug info for each target executable or DLL configured in the scan.
• B. msdia80.dll is not present and registered on the file system.
• C. The version of Visual Studio used to develop the application and corresponding projects is not installed in the scanning environment.
• D. A valid Visual Studio solution file (.sin) is not present on the file system and in the same directory as the .NET assembly files.

You are reviewing an online shopping application and find a lost sink method called combineltemListsf..,) that is provided by a third-party shopping framework. This method combines two lists of items (provided as arguments) into one.
Which type of custom rule do you need to create for this method?

• A. Source
• B. Taint Propagator
• C. Tainted Callback
• D. Sink
• E. Not Susceptible to Taint

You are reviewing an application and discover a method called doSomethingQ that retrieves and returns data from another system.
Which type of custom rule do you need to create for AppScan Source to properly capture this data?

• A. Source
• B. Taint Propagator
• C. Tainted Callback
• D. Sink
• E. Not Susceptible to Taint

You are reviewing a thick client application and come upon File Injection findings in a function that opens zip files and extracts data from them, but the customer you are working with tells you that the data is sanitized using a method mySanitizer.validateZip(..). You confirm this and decideto remove this vulnerability and other File Injection findings with sanitized data using the Remove functionality of the Trace section in the Filter Editor.
What do you need to do in the Trace Rule Entry dialog to ensure that the rule you create applies only to this application's zip extractor and not all File Inclusion findings?

• A. Specify File Inclusion as Source property.
• B. Add validateZipO to the Prohibited Calls section.
• C. Specify Sink method name.
• D. Add validateZipO to the Required Calls section.
• E. Specify File Inclusion as Sink property.