SAST testing is performed by:

The correct answer is A. scanning the application source code. SAST stands for Static Application Security Testing. The word 'static' is the key: the application is NOT executed during the test. Instead, SAST tools scan the application's source code, bytecode, or binary files at rest, analyzing them for vulnerabilities such as SQL…

Cloud Security Auditing

Question

Options

Ascanning the application source code.
Bscanning the application interface.
Cscanning all infrastructure components.
Dperforming manual actions to gain control of the application.

How the community answered

(23 responses)

A
96% (22)
C
4% (1)

Explanation

SAST stands for Static Application Security Testing. The word 'static' is the key: the application is NOT executed during the test. Instead, SAST tools scan the application's source code, bytecode, or binary files at rest, analyzing them for vulnerabilities such as SQL injection, buffer overflows, and insecure coding patterns. This contrasts with DAST (Dynamic Application Security Testing), which tests a running application by interacting with its interface (B). SAST is typically integrated into the CI/CD pipeline during development, enabling early detection of code-level security flaws before deployment.

Topics

#SAST#Application Security Testing#Static Analysis#Source Code Analysis

Community Discussion

No community discussion yet for this question.

Full CCAK Practice