HP ExpertOne exam preparation guide

HP Fortify Security Solutions ATP

Exam description
This exam tests your skills on Fortify Security Solutions, including application
security associated with designing a security solution for Web applications and
Web services using Fortify products. Additionally, this exam will test your
ability to apply the Fortify Security Solution within the development, testing
and production phases in a business environment.
This certification exam is designed for candidates with on the job experience.
The associated training courses provide a foundation, but you are expected to
have experience in real world situations.

Who should take this exam?

New candidates who want to acquire the HP ATP - Fortify Security V1
certification.

Exam contents
This exam has 60 questions. Here are the types of questions to expect:

Multiple choice (single response)

Multiple choice (multiple responses)

Objectives
This exam validates that you can successfully perform the following:
HP0-A103
13%

Sections/Objectives
OpenSAMM: Building Security into Software Development

Apply the Software Assurance Maturity Model (SAMM) to an

organizations security infrastructure

Use the SAMM guidelines to evaluate the needs of your

software security practices

Determine the HP Enterprise Security products as they

correlate to SAMM compliancy to your organizations
security practices

17%

Examine Common Vulnerabilities

List the OWASP Top 10 Application Security Risks

Perform a basic Threat Model and Risk Assessment
Integrate security activities into a basic SDLC
13%

Utilization of Fortify Products

Identify Fortify Products and how they satisfy the

guidelines of the OpenSAMM initiative

Describe Reporting and Incident Analysis

Describe architecture and structure of Fortify Products in
business security environment

Exam ID

HP0-A103

Exam type

Proctored

Exam time

90 minutes

Exam length

60 questions

Passing
score

70%

Delivery
languages

English

Related
certifications

Supporting
courses

These recommended courses help you prepare

for the exam:

HP ATP - Fortify Security V1

Fortify Security Solutions ATP Training

Additional
study
materials
Register for this exam

You will need an HP Learner ID.

During the exam, you can make specific comments about
the exam and items. HP welcomes these comments as part
of our continuous improvement process.
No online or hard copy reference material will be allowed at the
testing site. This exam may contain beta test items for
experimental purposes.

 Present overview of implementation requirements for

Fortify Product Suite

15%

Fortify Software Security Center

Tune scan results

Upload and download scans in SSC
Create projects in SSC
Connect to SSC from AWB
Generate reports to show outstanding issues & progress on
security goals

Integrate security activities into your SDLC

12%

Fortify Software Code Analyzer

Navigate Audit Workbench

Audit and suppress issues
Identify information on security issues
18%

HP WebInspect Introduction

Define operational capabilities of WebInspect

License and Activate WebInspect
Navigate the operational displays of WebInspect
12%

Fortify Runtime

List the benefits of using Fortify Runtime

Describe how Fortify Runtime correlates testing

Tips for taking this exam

This exam assesses whether you have the knowledge and skills to navigate and utilize Fortify Security products as a security solution in a
business development and production environment.
Take the time to read the entire question and consider all of the options carefully before you answer. If the question indicates that it features an
exhibit, study the exhibit and reread the question. Make sure to select the answer that correctly responds to the question that is asked, not simply
an answer that includes some correct information.
If the question asks for more than one answer, remember to select each correct answer. You will not receive partial credit for a partially correct
answer.

For more information

HP ExpertOne: www.hp.com/go/ExpertOne-ContactUs

Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only
warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein
should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omiss ions contained herein.

Created June 2014