A. HTTP is sent in plaintext TCP packets, where as HTTPS uses SSL on top of the TCP packets.

B. A HTTPS request is always from a validated source so it is more reliable than HTTP for secure traffic.

C. Because HTTP uses TCP it is unsecure. HTTPS does not use TCP packets so third
parties cannot modify the traffic.

D. HTTPS was created to secure the web server from attackers because HTTP still allows attacks..

A. The Login Macro runs whenever its logout signature matches on an HTTP Request.

B. The Login Macro runs whenever an Interactive Form is encountered, provided the user previously marked that form in the Web Form Editor.

C. The Login Macro runs whenever its logout signature matches on an HTTP Response.

D. The Login Macro runs whenever a login form or pop-up appears asking for user credentials.

A. The Request Retry Count indicates how much time WebInspect will spend on a request before marking the requested page as a null response.

B. The Request Retry Count indicates how many times to attempt a request before marking it as a null response.

C. The Request Retry Count indicates how long to wait before re-requesting the same, non-responsive page.

D. The Request Retry Count indicates how long to wait for a response.

A. enable Traffic Monitor in settings, complete scan, and export the scan with logs

B. export scan file and import to another copy of WebInspect

C. enable Traffic Monitor in settings, complete scan, and export scan file

D. run scan with default settings then export the scan with logs

A. Find the folder where scan data is stored and find the correct scan file.

B. Open the Scan and look at the Scan Properties.

C. Open the Scan and look at Scan ID in Scan Log .

D. Run the Scan Statistics report on the scan.

A. Configure the assessment to run during the middle of the day when the site traffic is highest.

B. Perform and analyze a Crawl-only scan on the site first.

C. Run a scan on the application using the All Checks policy.

D. Randomly audit a site online of comparable size as a benchmark of how long it will take.

A. It permits the MSIE Helper object to load ActiveX during an assessment.

B. It permits the execution of Javascript and other dynamic content within the WebInspect
GUI.

C. It permits the user to make live requests and view their responses within the Step-Mode pane.

D. It permits WebInspect to make live requests against the target server during an assessment.

A. ensure that any single page will only be requested 15 times during the Crawl phase

B. save time by only visiting a limited number of page variations for any individual page

C. ensure that any single page will only be requested 15 times during the entire assessment

D. visits the first 15 links on a page and stops

E. lighten the load on the target host by throttling the WebInspect scan