6.5.2. Dynamic Application Security Testing (DAST)

Try these first

1. 1.

   What does DAST stand for?

   Hint

   Think about how it tests applications.

2. 2.

   Give an example of a runtime issue DAST may find.

   Hint

   Consider what happens when users interact with the application.

3. 3.

   What is the primary focus of DAST?

   • To analyze source code
   • To test live applications
   • To fix vulnerabilities

   Hint

   Consider what makes DAST different from static testing methods.

4. 4.

   True or False: DAST can identify vulnerabilities that occur only when the application is running.

   • True
   • False

   Hint

   Think about the nature of runtime issues.

5. 5.

   Design a simple workflow to integrate DAST into an existing software development lifecycle that includes code reviews and deployment.

   Hint

   Think about where in the SDLC DAST will be most effective.

6. 6.

   You encounter multiple false positives after running a DAST tool. Discuss approaches to handle these effectively.

   Hint

   Consider how integrating manual validation could improve the testing process.