Exam SY0-601 topic 1 question 172 discussion

Dynamic analysis means that the application is tested under "real world" conditions using a staging environment.

Dynamic code analysis, also known as runtime application security testing (RAST) or dynamic application security testing (DAST), is the process of analyzing a running program or application in a live environment. In this type of assessment, the security analyst tests the application by interacting with it as an end-user would, sending inputs and examining the outputs to identify potential security vulnerabilities or weaknesses. During dynamic code analysis, the security analyst can identify critical issues, such as security flaws or vulnerabilities, that exist in the program while it is executing. These issues are then reported back to the developer for verification and remediation.

whats the difference between code analysis and manual code review?

static code analysis is a form of white-box testing that can help identify security issues in source code. On the other hand, dynamic code analysis is a form of black-box vulnerability scanning that allows software teams to scan running applications and identify vulnerabilities. When properly implemented, dynamic code analysis can reduce mean time to identification (MTTI) for production incidents, improve visibility to application issues, and increase a project’s overall security posture. https://www.checkpoint.com/cyber-hub/cloud-security/what-is-dynamic-code-analysis/

Agree with B