6.5. Security Testing Methods

Try these first

1. 1.

   What does SAST stand for?

   Hint

   It deals with source code analysis.

2. 2.

   True or False: DAST tests applications without executing them.

   Hint

   Think about when DAST is used.

3. 3.

   What is the primary function of SAST?

   • Testing source code at runtime
   • Analyzing static code
   • Monitoring application traffic

   Hint

   Focus on the analysis stage of testing.

4. 4.

   True or False: DAST can only find vulnerabilities after an application is deployed.

   • True
   • False

   Hint

   Think about the timing of when DAST is used.

5. 5.

   A company implemented both SAST and DAST separately and found multiple security flaws. They later incorporated IAST. How might their results differ?

   Hint

   Consider how combining both methods might reveal a comprehensive view.

6. 6.

   You are tasked with presenting to management the importance of incorporating DAST into your current security testing regimen. What key points would you emphasize?

   Hint

   Focus on the practical benefits and outcomes of DAST.