Secure Software Testing

You are configuring Checkmarx for a .NET application. The scan results consistently miss vulnerabilities in a third-party DLL. What is the most likely reason?

When performing a penetration test on an API, which tool is best suited for identifying broken object level authorization (BOLA)?

During IAST implementation in a CI/CD pipeline, the agent reports a high number of false positives regarding SQL injection. What is the most likely cause?

A developer is using AFL (American Fuzzy Lop) for fuzzing a C++ application. What is the primary requirement for achieving high coverage?

When using Burp Suite Professional to perform DAST against a web application with a complex multi-step form, what is the most effective way to ensure the scanner completes the workflow?

You are designing a fuzz testing strategy for a binary protocol parser. Which type of fuzzing is most effective for discovering memory corruption vulnerabilities in this component?

A security auditor is using OWASP ZAP and wants to perform an authenticated scan. Which ZAP feature should they use to maintain the session across different scan requests?

A security engineer is configuring SonarQube for a Java project. Which configuration step ensures that the SAST scan accurately identifies injection vulnerabilities by analyzing data flow paths?

Which of the following is the primary purpose of a DAST scan in a DevSecOps environment?

A security engineer is analyzing a report from a SAST tool (e.g., Fortify). A finding is marked as 'Low Confidence'. What does this imply?

During a manual penetration test, you discover an insecure direct object reference (IDOR). What is the most appropriate next step in the test case design for this finding?

When configuring a custom scan in Nessus to identify vulnerabilities in a web-based management interface, which setting is essential for deep authenticated scanning?

You are integrating Snyk into a CI pipeline. The scan is failing the build even when no new vulnerabilities are introduced. What is the cause?

A developer wants to ensure that a web application is resistant to SQL injection. Which test case should be included in the automated test suite?

You are performing a fuzzing campaign on a REST API. The API uses JSON Web Tokens (JWT). What is the most effective way to include these tokens in the fuzzer input?

When performing automated security testing, which of the following is considered a 'false positive'?

When configuring a DAST scanner to test for Cross-Site Request Forgery (CSRF), what must the scanner be able to do?

A company is implementing a Secure SDLC. Which phase is the most appropriate to start defining security test cases?

You are auditing a SAST tool's findings for a Java application. The tool flags a potential XSS in a JSP file, but the output is encoded using a library. How should you classify this finding?

Which TWO of the following are primary benefits of integrating SAST into the early stages of the SDLC?

Which testing methodology provides the best visibility into the internal logic of an application while it is running?

When designing a test case for secure API authentication, which THREE elements should be included?

Which TWO of the following practices are recommended when performing fuzz testing on a web service?

Which THREE factors should be considered when prioritizing findings from a DAST scan?

When setting up a penetration testing lab for a web application, which THREE network configurations are recommended?

Which TWO of the following are common challenges when implementing IAST?

Which TWO of the following represent common output formats for security testing reports?

When designing a test case for a secure authentication bypass, which THREE areas should be covered?