CS0-003: CompTIA Cybersecurity Analyst (CySA+)

By CompTIA · Question Mode

QuestionQ1

Vulnerability Management

A Chief Information Security Officer wants to implement security by design, beginning with a security-scanning method that identifies vulnerabilities, including SQL injection, RFI, XSS, and so on. Which of the following would most likely satisfy this requirement?

Explanation

Dynamic application security testing (DAST) scans a running web application as a black-box target, injecting test payloads and analyzing responses to identify vulnerabilities such as SQL injection and cross-site scripting. It is an appropriate security-scanning method for finding these externally observable web-application flaws.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!