White-Box Security Test Tools CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A development team is building a Java web application that processes user-supplied input in SQL queries. The security lead wants to identify SQL injection vulnerabilities before code is committed. The team's CI pipeline currently runs unit tests and builds artifacts. Which approach best meets the requirement?

   • AUse a code coverage tool to ensure all SQL query branches are tested by unit tests.
   • BRun a DAST tool against the staging environment after deployment to detect SQL injection.
   • CAdd a SAST tool that performs taint analysis to the CI pipeline and fail the build on critical findings.
   • DConfigure the compiler to treat all SQL-related warnings as errors.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes the primary purpose of white-box security test tools?

   • AThey simulate social engineering attacks against employees to test security awareness.
   • BThey analyze the internal structure, source code, or binaries of an application to identify security vulnerabilities.
   • CThey only check the configuration of the production environment for security misconfigurations.
   • DThey test the application from an external attacker's perspective without any internal knowledge.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is considering two SAST tools. Tool A has a lower false positive rate but misses some vulnerabilities. Tool B has a higher false positive rate but finds more vulnerabilities. The company has a small security team and developers are already overwhelmed. Which tool is more appropriate?

   • ATool B, because it has a higher true positive rate.
   • BTool A, because a lower false positive rate reduces noise and is more likely to be adopted by developers.
   • CTool B, because finding more vulnerabilities is always better.
   • DTool A, because it has a lower false negative rate.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a benefit of integrating white-box security test tools early in the software development lifecycle (SDLC)?

   • AIt reduces the cost and effort of fixing vulnerabilities by finding them early.
   • BIt allows the security team to skip penetration testing.
   • CIt guarantees that the application will be free of all security vulnerabilities.
   • DIt eliminates the need for manual code reviews.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security analyst is reviewing a SAST report for a web application. The tool flags a cross-site scripting (XSS) vulnerability where user input is reflected in an HTML response. Which combination of analysis techniques would the tool most likely use to identify this?

   • ATaint analysis to trace user input to the HTML output, combined with data flow analysis to confirm the input is not sanitized.
   • BControl flow analysis to find all execution paths, combined with lexical analysis to identify HTML tags.
   • CData flow analysis to track the input variable, combined with taint analysis to mark the HTML response as a sink.
   • DLexical analysis to find `echo` statements, combined with control flow analysis to determine if the statement is reachable.
   Reveal Solution Discussion Select an answer first