Implement Dynamic Application Security Testing (DAST) GITLAB-CERTIFIED-SECURITY-SPECIALIST Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   Why would you configure authentication in a DAST scan?

   • ATo prevent the scanner from being blocked by the application's rate limiting
   • BTo test the application's login page for vulnerabilities
   • CTo allow the scanner to access areas of the application that require a logged-in user
   • DTo improve the performance of the scan
   Reveal Solution Discussion Select an answer first
2. 22application · easy

   A development team is implementing security testing in their CI/CD pipeline. They want to catch vulnerabilities early in the development process, before the application is deployed. Which testing approach should they prioritize?

   • ADynamic Application Security Testing (DAST) because it tests the running application.
   • BSoftware Composition Analysis (SCA) because it scans dependencies for known vulnerabilities.
   • CInteractive Application Security Testing (IAST) because it combines static and dynamic analysis.
   • DStatic Application Security Testing (SAST) because it analyzes source code and can be run early in the pipeline.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   In which phase of the software development lifecycle is DAST most commonly performed?

   • ADuring code development, before the code is committed
   • BOnly after the application is in production
   • CAfter the application is deployed to a test or staging environment
   • DDuring requirements gathering, before any code is written
   Reveal Solution Discussion Select an answer first