SAST and DAST Testing DSE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security analyst is tasked with testing a web application that is already running in a staging environment. The application has a login page, a search function, and an admin panel that is only accessible to certain users. The analyst wants to identify vulnerabilities that are only visible when the application is fully deployed and interacting with its backend. Which testing approach is most appropriate?

   • ARun a SAST scanner on the staging server's configuration files.
   • BRun a DAST scanner against the staging URL, providing valid credentials for authenticated testing.
   • CPerform a manual code review of the authentication module.
   • DUse a network vulnerability scanner to check for open ports and outdated software versions.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team is conducting DAST on a web application that uses OAuth 2.0 for authentication. The DAST scanner is configured with valid credentials, but it is not finding any vulnerabilities in the authenticated areas. The team suspects that the scanner is not properly maintaining the session. What is the most likely cause and solution?

   • AThe scanner should be run without authentication to test public pages only.
   • BThe scanner may not be handling OAuth tokens correctly; configure the scanner to use the token endpoint and refresh tokens.
   • CThe scanner is not sending enough requests; increase the scan intensity.
   • DThe application is not vulnerable; no further action is needed.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team is conducting DAST on a web application that uses a WebSocket connection for real-time updates. The DAST scanner does not support WebSocket testing, and the team is concerned about missing vulnerabilities in that functionality. The application is critical and must be thoroughly tested. What is the best approach?

   • AUse a network scanner to test the WebSocket connection for vulnerabilities.
   • BRely on SAST to identify WebSocket vulnerabilities.
   • CSkip WebSocket testing because it is not a common attack vector.
   • DUse a specialized WebSocket testing tool or write custom scripts to test the WebSocket endpoints.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is developing a new web application and wants to implement security testing as part of their DevSecOps practice. They have a limited budget and can only afford one commercial testing tool. They want to cover both code-level and runtime vulnerabilities. What is the most cost-effective approach?

   • AUse only manual penetration testing.
   • BPurchase a commercial DAST tool and skip SAST.
   • CUse an open-source SAST tool in the CI pipeline and a free DAST tool against the staging environment.
   • DPurchase a commercial SAST tool and skip DAST.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security team is comparing SAST and DAST to decide which to purchase. They have a legacy application with no source code available, but they can deploy it to a test environment. Which testing approach is feasible?

   • ASAST, because it can analyze compiled binaries.
   • BBoth SAST and DAST, because they both can work without source code.
   • CDAST, because it tests the running application without needing source code.
   • DNeither, because security testing requires source code.
   Reveal Solution Discussion Select an answer first