App Security Engineer Testing Flashcards

What is the primary purpose of application security testing?

Answer: To identify vulnerabilities and weaknesses

Application security testing identifies vulnerabilities and weaknesses in software to prevent exploitation by attackers.

Which type of security testing simulates real-world attacks to find vulnerabilities?

Answer: Penetration testing

Penetration testing simulates attacks to identify security flaws before malicious hackers can exploit them.

Why is static application security testing (SAST) beneficial?

Answer: It identifies security flaws in source code early

SAST analyzes source code early in the development process to detect security issues before deployment.

What is the primary focus of dynamic application security testing (DAST)?

Answer: Detecting vulnerabilities in running applications

DAST tests applications while they are running to detect vulnerabilities that may not be visible in source code analysis.

Which security testing method helps detect vulnerabilities in third-party dependencies?

Answer: Software composition analysis (SCA)

Software composition analysis (SCA) scans third-party libraries and dependencies for known vulnerabilities.

Why is automated security testing important in application development?

Answer: It ensures consistent and efficient vulnerability detection

Automated security testing helps quickly identify vulnerabilities in large applications and ensures consistent testing across code changes.