TK Study
HomeMemoriseFlashcardsNotesMaster answersPast questionsMultiple choiceMock examPractice & marker

Multiple choice › SAST and DAST

SAST and DAST

1. SAST and DAST

Which statement correctly contrasts SAST and DAST?

  1. Both can only be done after the software is installed
  2. SAST analyses source code without running it; DAST tests the running application from the outside
  3. SAST tests the running application; DAST analyses source code without running it
  4. SAST needs a human attacker; DAST never does
Answer

B

Static = code at rest. Dynamic = software while it runs (e.g. simulated attacks).