Exam CCSK topic 1 question 47 discussion

B. True Dynamic Application Security Testing (DAST) involves testing the security of an application by simulating attacks and analyzing its response. In a cloud environment, DAST may have limitations or require pre-testing permission from the cloud service provider. Cloud service providers typically have policies and security measures in place to protect their infrastructure and the applications hosted on it. As a result, they may impose restrictions on conducting security testing, including DAST, without prior permission. This is done to prevent any potential impact on the stability, performance, or security of the cloud environment. Therefore, it is true that DAST might be limited or require pre-testing permission from the provider in a cloud environment. Organizations and individuals should consult and comply with the policies and procedures defined by their cloud service provider when conducting security testing activities.

(Security Guidance page 114) Due to the terms of service with the cloud provider DAST may be limited and/or require pre-testing permission from the provide