(ISC)2
CCSP · Question #874
Which testing method examines application source code without executing it to find security flaws?
The correct answer is A. Static Application Security Testing (SAST). SAST tools analyze code or binaries in a non-running state to identify vulnerabilities. DAST tests the running application. Pentesting is manual security testing, and fuzzing is random input testing.
Submitted by anna_se· Apr 18, 2026Cloud Application Security
Question
Which testing method examines application source code without executing it to find security flaws?
Options
- AStatic Application Security Testing (SAST)
- BDynamic Application Security Testing (DAST)
- CPenetration Testing (pentest)
- DFuzz Testing
How the community answered
(34 responses)- A94% (32)
- C3% (1)
- D3% (1)
Explanation
SAST tools analyze code or binaries in a non-running state to identify vulnerabilities. DAST tests the running application. Pentesting is manual security testing, and fuzzing is random input testing.
Topics
#SAST#Application Security Testing#Source Code Analysis#Software Development Security
Community Discussion
No community discussion yet for this question.