What does static application security testing (SAST) offer as a tool to the testers that makes it unique compared to other common security testing methodologies?

The correct answer is B. Source code access. Static application security testing (SAST) is conducted against offline systems with previous knowledge of them, including their source code. Live testing is not part of static testing but rather is associated with dynamic testing. Production system scanning is not appropriate…

Submitted by javi_es· Apr 18, 2026Cloud Application Security

Question

Options

ALive testing
BSource code access
CProduction system scanning
DInjection attempts

How the community answered

(20 responses)

B
90% (18)
C
5% (1)
D
5% (1)

Explanation

Static application security testing (SAST) is conducted against offline systems with previous knowledge of them, including their source code. Live testing is not part of static testing but rather is associated with dynamic testing. Production system scanning is not appropriate because static testing is done against offline systems. Injection attempts are done with many different types of testing and are not unique to one particular type. It is therefore not the best answer to the

Topics

#SAST#Application Security Testing#SDLC Security#Code Analysis

Community Discussion

No community discussion yet for this question.

Full CCSP Practice