A penetration tester is performing a security review of a web application. Which of the following should the tester leverage to identify the presence of vulnerable open-source libraries?

The correct answer is D. SCA. Software Composition Analysis (SCA): SCA tools analyze the dependencies and libraries used by an application to identify vulnerabilities in open-source components. Examples include identifying outdated or insecure versions of libraries (e.g., Log4j).

Submitted by dimitri_ru· Mar 6, 2026Vulnerability Discovery and Analysis

Question

Options

AVM
BIAST
CDAST
DSCA

How the community answered

(42 responses)

A
2% (1)
B
2% (1)
C
7% (3)
D
88% (37)

Explanation

Software Composition Analysis (SCA): SCA tools analyze the dependencies and libraries used by an application to identify vulnerabilities in open-source components. Examples include identifying outdated or insecure versions of libraries (e.g., Log4j).

Topics

#SCA#software composition analysis#open-source vulnerabilities#web application security

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice