Examkin

Question

Difficulty: EasyVulnerability Assessment and Security Testing Methods

A security analyst is planning a vulnerability assessment for a web application deployment. The team wants to ensure both dynamic, runtime testing and passive monitoring are utilized during the security evaluation. Which of the following methods should the analyst select to accomplish these goals? (Select TWO).

  1. Dynamic Application Security Testing (DAST)Answer
  2. Passive Network Packet InspectionAnswer
  3. C
    Configuring inline honeypot defense controls to block threat actors
  4. D
    Modifying web application database queries to mitigate SQL injection
  5. E
    Reclassifying security controls from detective to preventive in administrative documentation

Answer

The analyst should select Dynamic Application Security Testing (DAST) for runtime application testing and Passive Network Packet Inspection for non-intrusive monitoring.
Dynamic Application Security Testing (DAST) evaluates running applications from a functional perspective to detect security weaknesses during operation. Passive Network Packet Inspection allows analysts to observe network communications for vulnerabilities or cleartext exposures without generating additional probe traffic.

Step-by-Step Solution

1
Identify the testing requirements specified in the scenario.
The requirements are dynamic runtime testing of the web application and passive security monitoring.
Vulnerability assessment methods must match the exact operational context and testing objectives.
2
Evaluate the available assessment techniques against these requirements.
DAST executes test vectors against a running application, while passive packet inspection analyzes traffic without sending intrusive probes.
DAST evaluates dynamic runtime behavior and passive inspection fulfills non-intrusive monitoring requirements.

Key Concept

Selecting appropriate vulnerability assessment techniques based on active vs. passive testing objectives.
Rate this question

Topics

Vulnerability Assessment and Security Testing Methods

More questions from this topic