8-59.3 Application Security Testing

Question 1

Testing that can take place very early in the software development lifecycle as it does not require a working application

Answer 1

SAST - Static Application Security Testing

Question 2

Testing that addresses platform (Apple, Android) and device-specific security settings

Answer 2

MAST - Mobile Application Security Testing

Question 3

Methodology that used predefined security policies to detect and prevent attacks, such as SQL injection and cross-site scripting

Answer 3

RASP - Runtime Application Self-Protection

Question 4

Hybrid Testing that incorporates SAST and DAST techniques

Answer 4

IAST - Interactive Application Security Testing

Question 5

Testing that verifies a code change or update doesn’t introduce a fault, affect existing functionality, or impact interoperability

Answer 5

Regression Testing