SY0-701 · Question #1022
A company needs to determine whether authentication weaknesses in a customer-facing web application exist. Which of the following is the best technique to use?
The correct answer is D. Dynamic analysis. Dynamic analysis evaluates the web application while it is running, directly exercising its authentication processes to uncover weaknesses such as credential bypasses or session- handling flaws that static code review or network scans may not reveal.
Question
A company needs to determine whether authentication weaknesses in a customer-facing web application exist. Which of the following is the best technique to use?
Options
- AStatic analysis
- BPacket capture
- CAgent-based scanning
- DDynamic analysis
- ENetwork-based scanning
How the community answered
(52 responses)- A13% (7)
- B2% (1)
- C4% (2)
- D73% (38)
- E8% (4)
Explanation
Dynamic analysis evaluates the web application while it is running, directly exercising its authentication processes to uncover weaknesses such as credential bypasses or session- handling flaws that static code review or network scans may not reveal.
Community Discussion
No community discussion yet for this question.