IsacaIsaca
CDPSE · Question #380
CDPSE Question #380: Real Exam Question with Answer & Explanation
The correct answer is B: Conduct dynamic application security testing (DAST).. Conducting dynamic application security testing (DAST) is the best approach because it evaluates the web application in its running state, identifying vulnerabilities that could expose personal data during real-world use.
Privacy Architecture
Question
Which of the following is the BEST way to identify vulnerabilities in an organization's web application that processes personal data?
Options
- AImplement a web application firewall (WAF).
- BConduct dynamic application security testing (DAST).
- CHire a third party to perform blue team exercises.
- DConduct static application security testing (SAST).
Explanation
Conducting dynamic application security testing (DAST) is the best approach because it evaluates the web application in its running state, identifying vulnerabilities that could expose personal data during real-world use.
Topics
#Application Security Testing#DAST#Vulnerability Identification#Web Application Security
Community Discussion
No community discussion yet for this question.