A security team is evaluating SAST and DAST for a Java application that is being developed with a microservices architecture. The application uses many internal APIs that are not publicly accessible. The team wants to detect vulnerabilities in the internal APIs before they are exposed to external clients. Which approach is most effective?

Use only DAST against the public-facing endpoints

Use DAST with a crawler to discover internal APIs

Use only SAST on the shared libraries

Use SAST to analyze the source code of all microservices, and use DAST against a test environment that can access the internal APIs

What is the purpose of taint analysis in SAST?

To identify all possible execution paths in the code for test coverage.

To track the flow of untrusted input from entry points to sensitive operations, identifying potential injection vulnerabilities.

To check the application's compliance with accessibility standards.

To measure the performance of the application under load.

A SAST scan of a Java application reports a potential SQL injection vulnerability in a method that builds a query using string concatenation. A developer reviews the code and finds that the concatenated values are all hard-coded constants. What is the most appropriate action?

Ignore the finding without any action

Treat it as a false positive and suppress the finding with a justification

Refactor the code to use PreparedStatement regardless

Escalate the finding to the security team for immediate remediation

A security team has been using SAST and DAST for a Java application. They notice that some vulnerabilities are only found by SAST, while others are only found by DAST. They want to improve overall coverage. What should they do?

Run SAST and DAST in a complementary manner, using SAST during development and DAST in staging and production.

Use only SAST because it finds more vulnerabilities.

Replace both with manual penetration testing.

Use only DAST because it tests the running application.

A Java web application is developed by a team that practices continuous integration. The security lead wants to catch SQL injection and cross-site scripting (XSS) as early as possible in the development cycle, before the code is deployed to a test environment. Which testing approach best meets this requirement?

Perform manual penetration testing on the production environment quarterly

Use a runtime application self-protection (RASP) tool in production

Run a SAST scan as part of the CI pipeline on every commit

Run a DAST scan against the staging environment after each deployment

EC-CouncilCertified Application Security Engineer (Java)

Domain 8Objective 1

Static and Dynamic Application Security Testing (SAST and DAST) CASEJAVA Practice Questions (Page 9)

Part of the Security Testing and Secure Deployment domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 3–5 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

11concepts

Questions 41–45

41expert · hard
A security team is evaluating SAST and DAST for a Java application that is being developed with a microservices architecture. The application uses many internal APIs that are not publicly accessible. The team wants to detect vulnerabilities in the internal APIs before they are exposed to external clients. Which approach is most effective?
Select an answer first
42foundation · easy
What is the purpose of taint analysis in SAST?
Select an answer first
43application · medium
A SAST scan of a Java application reports a potential SQL injection vulnerability in a method that builds a query using string concatenation. A developer reviews the code and finds that the concatenated values are all hard-coded constants. What is the most appropriate action?
Select an answer first
44application · medium
A security team has been using SAST and DAST for a Java application. They notice that some vulnerabilities are only found by SAST, while others are only found by DAST. They want to improve overall coverage. What should they do?
Select an answer first
45application · medium
A Java web application is developed by a team that practices continuous integration. The security lead wants to catch SQL injection and cross-site scripting (XSS) as early as possible in the development cycle, before the code is deployed to a test environment. Which testing approach best meets this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASEJAVA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASEJAVA” is a trademark of its owner, used for identification only.

Static and Dynamic Application Security Testing (SAST and DAST) CASEJAVA Practice Questions (Page 9)

Questions 41–45

What is the purpose of taint analysis in SAST?

A SAST scan of a Java application reports a potential SQL injection vulnerability in a method that builds a query using string concatenation. A developer reviews the code and finds that the concatenated values are all hard-coded constants. What is the most appropriate action?

A security team has been using SAST and DAST for a Java application. They notice that some vulnerabilities are only found by SAST, while others are only found by DAST. They want to improve overall coverage. What should they do?

Keep studying — Security Testing and Secure Deployment