Practice Dynamic Application Security Testing (dast) (6.5.2) - Secure Software Development

Practice: Dynamic Application Security Testing (DAST)

Lesson 6.5.2Secure Software Development

Practise this section

8 questions

Flashcard drill
2 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
2 questions · about 1 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does DAST stand for?
Show hintHide hint
Think about how it tests applications.
Question 2.
Give an example of a runtime issue DAST may find.
Show hintHide hint
Consider what happens when users interact with the application.
3Question 3.
What is the primary focus of DAST?
- To analyze source code
- To test live applications
- To fix vulnerabilities
Show hintHide hint
Consider what makes DAST different from static testing methods.
4Question 4.
True or False: DAST can identify vulnerabilities that occur only when the application is running.
- True
- False
Show hintHide hint
Think about the nature of runtime issues.
Question 5.
Design a simple workflow to integrate DAST into an existing software development lifecycle that includes code reviews and deployment.
Show hintHide hint
Think about where in the SDLC DAST will be most effective.
Question 6.
You encounter multiple false positives after running a DAST tool. Discuss approaches to handle these effectively.
Show hintHide hint
Consider how integrating manual validation could improve the testing process.

4 more questions in this section. Enroll free to practise them all.