Certified Ethical Hacker CEH · Free Practice Question Medium
Question 91
Which of the following application security testing methods combines both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to improve testing efficiency and accuracy?
- A A. Dynamic Application Security Testing (DAST)
- B B. Static Application Security Testing (SAST)
- C C. Interactive Application Security Testing (IAST)
- D D. Mobile Application Security Testing (MAST)
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. Interactive Application Security Testing (IAST) Explanation: A. DAST is a type of security testing that involves analyzing the application in a running state to identify vulnerabilities. This type of testing examines the application's behavior while it is running and detects security issues that may not be visible through static analysis of the source code. B. SAST is a type of security testing that examines the application's source code to identify potential security vulnerabilities in the code without executing the application. This type of testing is useful for detecting security vulnerabilities in the early stages of software development, before the code is compiled or deployed. C. IAST is a testing method that combines both static and dynamic analysis techniques to improve testing efficiency and accuracy. IAST tools have the capability to analyze the application's source code as well as its running state to identify potential vulnerabilities. D. MAST is a type of security testing used specifically for mobile applications. This type of testing examines the mobile application's code and functionality to identify security vulnerabilities, including data leaks, malicious code injection, and other mobile-specific security issues.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
