A security analyst is reviewing the source code of an application in order to identify misconfigurations and vulnerabilities. Which of the following kinds of analysis best describes this review?

The correct answer is B. Static. Reviewing the source code of an application to identify misconfigurations and vulnerabilities is best described as static analysis. Static analysis involves examining the code without executing the program. It focuses on finding potential security issues, coding errors, and vulne

Submitted by manish99· Mar 6, 2026Security Operations

Question

Options

ADynamic
BStatic
CGap
DImpact

How the community answered

(23 responses)

B
96% (22)
C
4% (1)

Explanation

Reviewing the source code of an application to identify misconfigurations and vulnerabilities is best described as static analysis. Static analysis involves examining the code without executing the program. It focuses on finding potential security issues, coding errors, and vulnerabilities by analyzing the code itself. Static analysis: Analyzes the source code or compiled code for vulnerabilities without executing Dynamic analysis: Involves testing and evaluating the program while it is running to identify vulnerabilities. Gap analysis: Identifies differences between the current state and desired state, often used for compliance or process improvement. Impact analysis: Assesses the potential effects of changes in a system or process.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice