6.2.4. Testing

Try these first

1. 1.

   What does SAST stand for?

   Hint

   Think about security testing that examines code.

2. 2.

   Which method tests running applications by simulating real attacks?

   Hint

   This test runs while the application is live.

3. 3.

   What does DAST specifically test?

   • Source code
   • Running application
   • Static assets

   Hint

   This testing method simulates real attacks.

4. 4.

   True or False: IAST stands for Interactive Application Security Testing.

   • True
   • False

   Hint

   Think about the full form of the acronym.

5. 5.

   Analyze a scenario where a company failed to implement adequate security testing. Describe the vulnerabilities that could emerge and their repercussions.

   Hint

   Think about common vulnerabilities and their impacts on the business.

6. 6.

   Propose a comprehensive testing strategy for an application that handles sensitive data.

   Hint

   Consider integrating multiple testing methodologies for a robust strategy.