What does static application security testing (SAST) offer as a tool to the testers?

The correct answer is C. Source code access. SAST is a white-box testing methodology that analyzes an application's source code, bytecode, or binaries without executing the program. Testers (or automated tools) review the actual source code to identify vulnerabilities such as injection flaws, insecure function calls, or…

Submitted by olafpl· Apr 18, 2026Cloud Application Security

Question

Options

AProduction system scanning
BInjection attempts
CSource code access
DLive testing

How the community answered

(30 responses)

A
3% (1)
B
7% (2)
C
87% (26)
D
3% (1)

Explanation

SAST is a white-box testing methodology that analyzes an application's source code, bytecode, or binaries without executing the program. Testers (or automated tools) review the actual source code to identify vulnerabilities such as injection flaws, insecure function calls, or hardcoded secrets early in the development lifecycle. This distinguishes SAST from DAST, which tests a live, running application (D) through scanning and probing (A, B) without access to the underlying code.

Topics

#SAST#Application Security Testing#Source Code Analysis#Cloud Application Security

Community Discussion

No community discussion yet for this question.

Full CCSP Practice