Examkin

Soru

Zorluk: KolayVulnerability Assessment and Security Testing Methods

A security analyst is planning a vulnerability assessment for a web application deployment. The team wants to ensure both dynamic, runtime testing and passive monitoring are utilized during the security evaluation. Which of the following methods should the analyst select to accomplish these goals? (Select TWO).

  1. Dynamic Application Security Testing (DAST)Cevap
  2. Passive Network Packet InspectionCevap
  3. C
    Configuring inline honeypot defense controls to block threat actors
  4. D
    Modifying web application database queries to mitigate SQL injection
  5. E
    Reclassifying security controls from detective to preventive in administrative documentation

Cevap

The analyst should select Dynamic Application Security Testing (DAST) for runtime application testing and Passive Network Packet Inspection for non-intrusive monitoring.
Dynamic Application Security Testing (DAST) evaluates running applications from a functional perspective to detect security weaknesses during operation. Passive Network Packet Inspection allows analysts to observe network communications for vulnerabilities or cleartext exposures without generating additional probe traffic.

Adım Adım Çözüm

1
Identify the testing requirements specified in the scenario.
The requirements are dynamic runtime testing of the web application and passive security monitoring.
Vulnerability assessment methods must match the exact operational context and testing objectives.
2
Evaluate the available assessment techniques against these requirements.
DAST executes test vectors against a running application, while passive packet inspection analyzes traffic without sending intrusive probes.
DAST evaluates dynamic runtime behavior and passive inspection fulfills non-intrusive monitoring requirements.

Anahtar Kavram

Selecting appropriate vulnerability assessment techniques based on active vs. passive testing objectives.
Bu soruyu puanla

Konular

Vulnerability Assessment and Security Testing Methods

Bu konudan daha fazla soru