C. - Static code analysis is conducted by analyzing an application’s source code. Obviously, this type of testing is usually performed only during a white box penetration test. Static code analysis does not involve actually running the program. Instead, it is focused on analyzing how the application is written. Static Code Analysis commonly refers to the running of Static Code Analysis tools that attempt to highlight possible vulnerabilities within ‘static’ (non-running) source code by using techniques such as Taint Analysis and Data Flow Analysis.
Im gonna have to say B since they are saying it's a PenTester and not software dev. so that would make it a blackbox review. see https://owasp.org/www-community/Fuzzing
I think the key words in the question are "code review", in my experience doing a code review is a pretty tough without the code. Since static review is the only available option on actual source code, the answer has to be C. If the question had said "application review" in some way instead of "code review" then this goes a different direction.
C. https://owasp.org/www-community/controls/Static_Code_Analysis
Static Code Analysis (also known as Source Code Analysis) is usually performed as part of a Code Review (also known as white-box testing) and is carried out at the Implementation phase of a Security Development Lifecycle (SDL). Static Code Analysis commonly refers to the running of Static Code Analysis tools that attempt to highlight possible vulnerabilities within ‘static’ (non-running) source code by using techniques such as Taint Analysis and Data Flow Analysis.
Yes that is correct if they have the source but they are saying a pentester which they usually do not have the source unless it's a whitebox but it doesnt say so ??
upvoted 1 times
...
...
This section is not available anymore. Please use the main Exam Page.PT0-001 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
mr_robot
Highly Voted 5 years, 1 month agox0hmei
3 years, 11 months agokamaluchi
3 years, 10 months agomiabe
Most Recent 2 years, 10 months agodustercan
3 years, 7 months agosmalltech
3 years, 10 months agosmalltech
3 years, 10 months agox0hmei
3 years, 10 months ago