Exam CAS-004 topic 1 question 377 discussion

Actual exam question from CompTIA's CAS-004

Question #: 377
Topic #: 1

A SaaS startup is maturing its DevSecOps program and wants to identify weaknesses earlier in the development process in order to reduce the average time to identify serverless application vulnerabilities and the costs associated with remediation. The startup began its early security testing efforts with DAST to cover public-facing application components and recently implemented a bug bounty program. Which of the following will BEST accomplish the company’s objectives?

A. RASP
B. SAST
C. WAF
D. CMS

Show Suggested Answer

Suggested Answer: B 🗳️

by nuel_12 at Nov. 18, 2023, 8:40 a.m.

Comments

Submit Cancel

041ba31

5 months, 1 week ago

Selected Answer: B

The best answer is B. SAST. SAST (Static Application Security Testing) allows for early detection of vulnerabilities by analyzing source code or binaries, helping to identify and fix security issues earlier in the development process, thus reducing the time and cost associated with remediation.

upvoted 2 times

...

saucehozz

6 months, 1 week ago

Selected Answer: B

SAST is used earlier in the dev lifecycle without executing code and identifies security issues that can be mitigated before the code is deployed.

upvoted 2 times

...

CraZee

9 months, 1 week ago

Selected Answer: B

Duplicate of question #282, but this is a single answer vs. choose 2 for 282. The consensus for 282 was SAST and IAST...so with the same "wrong" answers here, I feel confident going with SAST.

upvoted 2 times

...

nuel_12

11 months, 3 weeks ago

Selected Answer: B

to identify bug at the early stage of the SDLC

upvoted 2 times

...

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

Exam CAS-004 topic 1 question 377 discussion

Comments

041ba31

saucehozz

CraZee

nuel_12

SY0-701