Static Application Security Testing (SAST) CASENET Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team is reviewing SAST results for a .NET application. The tool reports a 'Critical' finding for a command injection vulnerability in a method that executes a system command. The developer argues that the method is only called internally with hardcoded arguments and is not reachable from user input. The team has limited time to remediate. What is the most appropriate approach?

   • AChange the severity of the finding to 'Low' in the SAST tool.
   • BImmediately fix the method by adding input validation, even though it is not user-reachable.
   • CIgnore the finding because the developer says it is not exploitable.
   • DVerify the data flow to confirm whether user input can reach the method, and if not, suppress the finding with a justification.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A SAST tool is scanning a .NET application that uses Entity Framework. The tool reports a SQL injection vulnerability in a query that uses a raw SQL string with concatenated user input. Which of the following is the most appropriate fix?

   • AAdd input validation to ensure the user input contains only alphanumeric characters.
   • BUse a stored procedure that accepts the user input as a parameter.
   • CReplace the raw SQL query with a parameterized query or use Entity Framework's LINQ methods.
   • DEncode the user input before concatenating it into the SQL string.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the purpose of defining a security policy in a SAST tool?

   • ATo replace the need for developer training on secure coding
   • BTo automatically fix all identified vulnerabilities
   • CTo enforce organizational security standards by specifying which rules must pass before code is accepted
   • DTo encrypt the source code repository
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following vulnerabilities is a SAST tool most likely to detect in a .NET application?

   • AA denial-of-service attack that occurs only under high load
   • BA social engineering attack targeting employees
   • CA misconfigured firewall rule on the production server
   • DSQL injection caused by concatenating user input into a SQL query
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A developer fixed a SAST finding that flagged a stored XSS vulnerability in an ASP.NET page. The fix involved encoding user input before rendering. The developer then runs the SAST scan again and the finding is gone. What is the most appropriate next step?

   • AClose the finding immediately because the SAST scan no longer reports it.
   • BIgnore the finding because SAST false positives are common.
   • CSubmit the fix to the security team for manual penetration testing before closing.
   • DRun the application's unit and integration tests to ensure the fix did not break functionality.
   Reveal Solution Discussion Select an answer first