exam questions

Exam CCSP All Questions

View all questions & answers for the CCSP exam

Exam CCSP topic 1 question 193 discussion

Actual exam question from ISC's CCSP
Question #: 193
Topic #: 1
[All CCSP Questions]

What does static application security testing (SAST) offer as a tool to the testers?

  • A. Production system scanning
  • B. Injection attempts
  • C. Source code access
  • D. Live testing
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Static application security testing (SAST) is conducted with knowledge of the system, including source code, and is done against offline systems.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
xav1er
4 months, 1 week ago
Selected Answer: C
Answer C Static Application Security Testing (SAST): This test is able to do a static analysis of source code. Source code is available for internally developed software systems. Static testing will not find all vulnerabilities. SAST is a good initial test to eliminate common vulnerabilities that can be found in this manner. As the code is known, this is a form of white-box testing
upvoted 2 times
...
zaqwsx
5 months ago
correct It is a type of white box testing method meaning they require access to source code to function. It finds all security vulnerabilities including software flaws and weaknesses such as SQL injection and others by examining code before it is deployed.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago