Which type of application security testing should incorporate checks on API calls to the cloud service?

The correct answer is D. Static Application Security Testing (SAST). Static Application Security Testing (SAST): On top of the normal range of tests, these should ideally incorporate checks on API calls to the cloud service. They should also look for any static embedded credentials for those API calls, which is a growing problem.

Cloud Application Security

Question

Options

ADynamic Application Security Testing (DAST)
BUnit Testing
CFunctional Testing
DStatic Application Security Testing (SAST)
EAll of the above

How the community answered

(43 responses)

A
2% (1)
B
5% (2)
D
81% (35)
E
12% (5)

Explanation

Static Application Security Testing (SAST): On top of the normal range of tests, these should ideally incorporate checks on API calls to the cloud service. They should also look for any static embedded credentials for those API calls, which is a growing problem.

Topics

#SAST#application security testing#API security#secure SDLC

Community Discussion

No community discussion yet for this question.

Full CCSK Practice