CompTIA
SY0-701 · Question #770
Which of the following activities identifies but does not exploit vulnerabilities?
The correct answer is B. Static analysis. Static analysis examines code in a non-running state to uncover vulnerabilities without executing or exploiting them, ensuring you identify issues without actively attacking the system.
Submitted by krish.m· Mar 6, 2026Threats, vulnerabilities, and mitigations
Question
Which of the following activities identifies but does not exploit vulnerabilities?
Options
- APenetration test
- BStatic analysis
- CDynamic analysis
- DBug bounty
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- C4% (1)
Explanation
Static analysis examines code in a non-running state to uncover vulnerabilities without executing or exploiting them, ensuring you identify issues without actively attacking the system.
Community Discussion
No community discussion yet for this question.