Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?
Which type of application security testing tests running applications and includes tests such as web vulnerability testing and fuzzing?
Dynamic Application Security Testing (DAST) is a method used to test running applications by simulating real-world attacks and examining the application's behavior. It includes methods such as web vulnerability testing and fuzzing to identify security weaknesses and vulnerabilities in the deployed state of the application.
E. Dynamic Application Security Testing (DAST) Dynamic Application Security Testing (DAST) is a type of application security testing that involves testing running applications to identify vulnerabilities and security weaknesses. It simulates real-world attacks on the application and examines how it responds to those attacks. DAST typically includes tests such as web vulnerability scanning, penetration testing, and fuzzing. DAST tools send various inputs and payloads to the application, analyze the responses, and identify potential vulnerabilities such as injection flaws, cross-site scripting (XSS), and insecure configurations. Unlike Static Application Security Testing (SAST), which analyzes the application's source code, DAST focuses on the application in its deployed state. Therefore, the correct answer is E. Dynamic Application Security Testing (DAST).