Examkin

Soru

Zorluk: OrtaVulnerability Assessment and Security Testing Methods

A security analyst is establishing a vulnerability testing framework for a web application hosted in a staging environment. The framework requires two specific testing techniques: one method that actively interacts with the executing web application to identify runtime vulnerabilities like cross-site scripting, and another method that passively observes network traffic without injecting traffic or modifying state to identify unencrypted cleartext protocols. Which of the following security assessment methods should the analyst select to fulfill these requirements? (Select TWO.)

  1. Dynamic Application Security Testing (DAST)Cevap
  2. Passive Network Packet AnalysisCevap
  3. C
    Static Application Security Testing (SAST)
  4. D
    Inline Deception Honeypot Deployment
  5. E
    Parameterized Query Code Remediation

Cevap

The analyst should select Dynamic Application Security Testing (DAST) to discover runtime application vulnerabilities and Passive Network Packet Analysis to safely detect cleartext protocol usage without injecting network traffic.
Dynamic Application Security Testing (DAST) actively tests live running web applications to uncover runtime security defects like cross-site scripting (XSS), fulfilling the first requirement. Passive Network Packet Analysis captures and inspects live traffic stream headers and payloads without transmitting probing frames, satisfying the requirement to detect cleartext protocols safely.

Adım Adım Çözüm

1
Identify the requirement for testing a running web application dynamically for runtime flaws.
Dynamic Application Security Testing (DAST) matches this requirement because it tests live, executing applications from an external perspective.
Runtime vulnerability discovery requires black-box or gray-box dynamic execution analysis.
2
Identify the requirement for detecting cleartext protocols without injecting network traffic.
Passive Network Packet Analysis fulfills this mandate by inspecting existing traffic packets without sending active probes.
Active network scanning generates traffic and can disrupt legacy components, whereas passive packet capture does not alter traffic flow.

Anahtar Kavram

Vulnerability Assessment and Security Testing Methods
Bu soruyu puanla

Konular

Vulnerability Assessment and Security Testing Methods

Bu konudan daha fazla soru