CCAK: Certificate of Cloud Auditing Knowledge

By Isaca · Question Mode

QuestionQ41

VerifiedCCM: Auditing Controls

What is an advantage of using the dynamic application security testing (DAST) methodology over static application security testing (SAST)?

Explanation

DAST generally tests a running application as a black box, interacting with its exposed interfaces without requiring source code. This makes it generally independent of the application’s programming language, whereas SAST analyzes source code or compiled code. (owasp.org)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!