Back to Software Development Security

Static and Dynamic Application Security Testing (SAST/DAST)

5 minutes 5 Questions

Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) are automated security testing methodologies employed throughout the SDLC to identify vulnerabilities and potential threats in source code, compiled binaries, or running applications. SAST involves scanning t…

Test mode:
Start practice test
CISSP - Static and Dynamic Application Security Testing (SAST/DAST) Example Questions

Test your knowledge of Static and Dynamic Application Security Testing (SAST/DAST)

Question 1

A company reviews their application's code for security vulnerabilities. During the review process, they discover that sensitive information is hardcoded in the source code. What type of security testing can be used to identify this issue?

Correct Answer: SAST

SAST (Static Application Security Testing) is focused on analyzing source code and can identify hardcoded sensitive information, while the other testing methods do not analyze code.

Question 2

A security team wants to perform vulnerability analysis during the SDLC. Which of the following testing methodologies ensures comprehensive coverage for both static code and runtime security assessment?

Correct Answer: Combine SAST and DAST

Combining SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) offers comprehensive coverage of the application's security. SAST helps identify code vulnerabilities, while DAST finds vulnerabilities in the running application and its environment.

Question 3

A company wants to improve their web application security process by using both SAST and DAST tools. Which option below best represents the main benefits of using both tools together?

Correct Answer: SAST can discover code vulnerabilities, while DAST can discover runtime vulnerabilities, therefore improving overall vulnerability detection

By adopting a combined approach that uses both SAST and DAST, organizations can improve vulnerability detection by addressing code vulnerabilities and runtime environment issues. This provides a more comprehensive security testing process and helps ensure better overall security for the application.

More Static and Dynamic Application Security Testing (SAST/DAST) questions
17 questions (total)
Start 17 question test