Dynamic Application Security Testing (DAST) CASENET Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A DAST scan of a single-page application (SPA) built with Angular is not discovering vulnerabilities in client-side rendered views. The scanner only sees the initial HTML shell. Which technique should be used to improve DAST coverage of the SPA?

   • AProvide the scanner with the Angular source code to analyze the client-side logic.
   • BUse a simple HTTP crawler that follows links in the HTML.
   • CDisable JavaScript in the scanner to speed up the crawl.
   • DEnable the scanner's browser-based crawling or use a headless browser to execute JavaScript and discover dynamic routes.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A security team is preparing to run DAST on a .NET application that has multiple user roles: anonymous, standard user, and administrator. The application's functionality varies significantly by role. What is the best practice for scoping the scan to ensure comprehensive coverage?

   • ARun an unauthenticated scan only, as it is the safest and most realistic attack surface.
   • BRun a single scan with no authentication, but manually test role-specific pages afterwards.
   • CRun a single scan using administrator credentials, as that role has access to all functionality.
   • DRun separate scans for each role, using valid credentials for each role and ensuring the scanner can access role-specific pages.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which statement correctly contrasts SAST and DAST?

   • ASAST requires a running application, while DAST analyzes source code.
   • BSAST is performed from the outside like a black-box, while DAST is performed from the inside like a white-box.
   • CSAST analyzes source code for vulnerabilities, while DAST tests the running application for vulnerabilities.
   • DSAST and DAST both require access to the application's source code.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   After running a DAST scan on a .NET web application, the report lists a potential SQL injection in a search parameter and a potential XSS in a comment field. The security team needs to prioritize remediation. Which finding should be addressed first?

   • ABoth equally, because DAST reports do not provide severity ratings.
   • BNeither, because DAST results are always false positives and require manual verification first.
   • CThe XSS, because it is easier to exploit and affects all users.
   • DThe SQL injection, because it may allow an attacker to access or modify the underlying database.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A security architect is evaluating whether to use DAST for a .NET application that is a REST API with no user interface. The API uses token-based authentication and is consumed by mobile clients. Which consideration is most important when deciding to use DAST for this API?

   • ADAST should be replaced by SAST for API testing because APIs are code-only.
   • BDAST can test the API endpoints directly by sending crafted HTTP requests, but it must be configured with valid tokens and understand the API's request/response formats.
   • CDAST is only useful for finding XSS and SQL injection, which are not applicable to APIs.
   • DDAST is not suitable for APIs because it is designed for web applications with a user interface.
   Reveal Solution Discussion Select an answer first