Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 50 of 82
Free Preview · 82 of 271 · questions 1–82 of 271 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Unlike SAST, DAST is a blackbox and programming language agnostic. DAST is programming language agnostic, it does not depend on a particular programming language. DAST can also be called "black box testing" or "outside-in testing", it does not require access to the source code. DAST check how code behaves and how the app interface react to various input. Please use google to find the answer .... Unfair question because it is not content of the study guide.
A. Unlike SAST, DAST is a blackbox and programming language agnostic. The primary advantage of using Dynamic Application Security Testing (DAST) over Static Application Security Testing (SAST) is that DAST is a blackbox testing method and is programming language agnostic. This means DAST tests the application from the outside in, simulating how an attacker would interact with the application without needing access to the source code. It can be used to test any application regardless of the programming language or technology stack used.
Rather than scanning code or binaries like SAST, DAST dynamically crawls through an application interface, testing how it reacts to various inputs. The good news is they tend to have low rates of false positives. DAST may require some time to fully scan code.