A Chief Information Security Officer wants to implement security by design, starting with the implementation of a security scanning method to identify vulnerabilities, including SQL injection, RFI…

The correct answer is C. Dynamic application security testing. Dynamic Application Security Testing (DAST) is used to detect vulnerabilities in running applications, including common issues like SQL injection, FRI, XSS, etc. It aligns with the goal of implementing security by design.

Submitted by asante_acc· Mar 6, 2026Vulnerability Management

Question

A Chief Information Security Officer wants to implement security by design, starting with the implementation of a security scanning method to identify vulnerabilities, including SQL injection, RFI, XSS, etc. Which of the following would most likely meet the requirement?

Options

AReverse engineering
BKnown environment testing
CDynamic application security testing
DCode debugging

How the community answered

(49 responses)

A
8% (4)
B
4% (2)
C
84% (41)
D
4% (2)

Explanation

Dynamic Application Security Testing (DAST) is used to detect vulnerabilities in running applications, including common issues like SQL injection, FRI, XSS, etc. It aligns with the goal of implementing security by design.

Topics

#Application security testing#DAST#Web vulnerabilities#Security by design

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice