CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ214

VerifiedCloud Application Security

What does static application security testing (SAST) provide to testers that distinguishes it from other common security-testing methodologies?

Explanation

SAST examines source code to identify security weaknesses before or without running the application. This code-level visibility distinguishes it from dynamic methods that test a live application through scanning or attack attempts.

Community Discussion

No comments yet. Be the first to start the discussion!