Exam CS0-003 topic 1 question 293 discussion

Pen testing is quite evasive and expansive, but not correct answer in this scenario, since the app is in its Pilot phase.

Answer is dynamic testing

Correct Answer: C. Dynamic testing Analysis: Given that the application's source code is not available, dynamic testing is an appropriate method to evaluate the security of the software. Dynamic testing involves analyzing the application by executing it and observing its behavior during runtime, which allows for the identification of security vulnerabilities that may not be evident through code inspection alone.

Penetration testing simulates real-world attacks to identify vulnerabilities and assess the overall security posture of the application.

D. Penetration testing Since the source code is not available, static testing and vulnerability scanning are not feasible options. Dynamic testing, while useful, might not be sufficient to uncover deep-rooted vulnerabilities. Penetration testing is the most suitable approach in this case. It involves simulating real-world attacks to identify and exploit vulnerabilities in the application. This approach doesn't require access to the source code and can reveal critical security flaws that other testing methods might miss.

D Penetration testing Penetration testing simulates real-world attacks on the application to identify vulnerabilities that could be exploited by an attacker. This method doesn't require access to the source code and is effective in assessing the security of the application in its operational environment.