Which of the following is not a feature of DAST?

Prepare for the WGU C838 Managing Cloud Security Exam. Study effectively with flashcards and multiple-choice questions, complete with hints and explanations. Ensure your success with this comprehensive preparation guide.

Dynamic Application Security Testing (DAST) focuses on identifying security vulnerabilities in running applications. This technique mimics how attackers might exploit vulnerabilities by testing an application in a live environment. The essence of DAST lies in its ability to test applications at runtime, assessing how they behave while operational, which corresponds to the first option's feature.

Another relevant feature of DAST is its implementation of "black-box" testing, where the tester has no prior knowledge of the internal code structure but evaluates the application solely based on its inputs and outputs. This characteristic aligns with the third choice.

User teams performing executable testing are integral to DAST, as it allows skilled testers to evaluate how a deployed application responds to various inputs and potential threats effectively. This interactive component is fundamental to ensuring that real-world scenarios are accounted for during security assessments.

In contrast, binary inspection tends to be associated with Static Application Security Testing (SAST), which analyzes the source code or binaries without executing the program. DAST does not delve into the internal workings of the application's codebase but rather focuses on the application as a whole in its operational environment. Hence, binary inspection is not a feature of DAST, making it the correct choice.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy