ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 594 - SY0-601 discussion

Report
Export

A security analyst has been tasked with ensuring all programs that are deployed into the enterprise have been assessed in a runtime environment Any critical issues found in the program must be sent back to the developer for verification and remediation. Which of the following lost describes the type of assessment taking place?

A.
Input validation
Answers
A.
Input validation
B.
Dynamic code analysis
Answers
B.
Dynamic code analysis
C.
Fuzzing
Answers
C.
Fuzzing
D.
Manual code review
Answers
D.
Manual code review
Suggested answer: B

Explanation:

Dynamic code analysis is a technique that tests and analyzes an application during runtime to identify potential vulnerabilities, errors, or performance issues. Dynamic code analysis can detect problems that may not be visible in the source code or during static analysis, such as memory leaks, buffer overflows, or input validation errors. Dynamic code analysis can also simulate real-world scenarios and user inputs to evaluate the behavior and functionality of the application. Reference: CompTIA Security+ SY0-601 Certification Study Guide, Chapter 5:

Implementing Host Security Solutions, page 246; What is Dynamic Code Analysis?

asked 02/10/2024
Rolf Johannesen
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first