PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ106

Vulnerability Discovery and Analysis

A penetration tester must identify every vulnerable input field on a customer website. Which of the following tools is best suited to fulfill this request?

  • A DAST
  • B SAST
  • C IAST
  • D SCA
Explanation

Dynamic application security testing (DAST) interacts with a running web application through its front end and detects vulnerabilities by exercising inputs with attack payloads. It is suited to finding input-validation weaknesses such as SQL injection and cross-site scripting. OWASP DAST tools

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!