Secure Software Testing

Which THREE factors should be considered when prioritizing findings from a DAST scan?

You are designing a fuzz testing strategy for a binary protocol parser. Which type of fuzzing is most effective for discovering memory corruption vulnerabilities in this component?

During IAST implementation in a CI/CD pipeline, the agent reports a high number of false positives regarding SQL injection. What is the most likely cause?

When setting up a penetration testing lab for a web application, which THREE network configurations are recommended?

A company is implementing a Secure SDLC. Which phase is the most appropriate to start defining security test cases?

A security auditor is using OWASP ZAP and wants to perform an authenticated scan. Which ZAP feature should they use to maintain the session across different scan requests?

When designing a test case for secure API authentication, which THREE elements should be included?

Which TWO of the following represent common output formats for security testing reports?

A developer wants to ensure that a web application is resistant to SQL injection. Which test case should be included in the automated test suite?

Which TWO of the following practices are recommended when performing fuzz testing on a web service?

A security engineer is analyzing a report from a SAST tool (e.g., Fortify). A finding is marked as 'Low Confidence'. What does this imply?

You are performing a fuzzing campaign on a REST API. The API uses JSON Web Tokens (JWT). What is the most effective way to include these tokens in the fuzzer input?

Which TWO of the following are primary benefits of integrating SAST into the early stages of the SDLC?

When designing a test case for a secure authentication bypass, which THREE areas should be covered?

A security engineer is configuring SonarQube for a Java project. Which configuration step ensures that the SAST scan accurately identifies injection vulnerabilities by analyzing data flow paths?

When configuring a DAST scanner to test for Cross-Site Request Forgery (CSRF), what must the scanner be able to do?

Which testing methodology provides the best visibility into the internal logic of an application while it is running?

A developer is using AFL (American Fuzzy Lop) for fuzzing a C++ application. What is the primary requirement for achieving high coverage?

During a manual penetration test, you discover an insecure direct object reference (IDOR). What is the most appropriate next step in the test case design for this finding?

Which of the following is the primary purpose of a DAST scan in a DevSecOps environment?

You are integrating Snyk into a CI pipeline. The scan is failing the build even when no new vulnerabilities are introduced. What is the cause?

When using Burp Suite Professional to perform DAST against a web application with a complex multi-step form, what is the most effective way to ensure the scanner completes the workflow?

Which TWO of the following are common challenges when implementing IAST?

You are auditing a SAST tool's findings for a Java application. The tool flags a potential XSS in a JSP file, but the output is encoded using a library. How should you classify this finding?

When configuring a custom scan in Nessus to identify vulnerabilities in a web-based management interface, which setting is essential for deep authenticated scanning?

When performing automated security testing, which of the following is considered a 'false positive'?

You are configuring Checkmarx for a .NET application. The scan results consistently miss vulnerabilities in a third-party DLL. What is the most likely reason?

When performing a penetration test on an API, which tool is best suited for identifying broken object level authorization (BOLA)?