CCSP · Question #314
Dynamic application security testing (DAST) is usually considered a ________ form of testing. Response: White-box
The correct answer is B. Black-box. Dynamic Application Security Testing (DAST) is typically a black-box testing method because it analyzes an application from an external, operational perspective without access to its internal source code or architecture.
Question
Dynamic application security testing (DAST) is usually considered a ________ form of testing. Response:
White-box
Options
- AParched field
- BBlack-box
- CGray-box
- DParched field
How the community answered
(56 responses)- A2% (1)
- B86% (48)
- C4% (2)
- D9% (5)
Why each option
Dynamic Application Security Testing (DAST) is typically a black-box testing method because it analyzes an application from an external, operational perspective without access to its internal source code or architecture.
"Parched field" is not a recognized type of security testing.
DAST is a black-box testing methodology because it evaluates the security of an application by executing it and observing its behavior from the outside, interacting with the running application similar to an attacker, without requiring access to the source code or internal structure.
Gray-box testing involves some limited knowledge of the internal structure, which is not the primary characteristic of DAST.
"Parched field" is not a recognized type of security testing (duplicate option).
Concept tested: Application security testing types (DAST, black-box)
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/daf-overview
Topics
Community Discussion
No community discussion yet for this question.