Exam SC-100 topic 4 question 7 discussion

https://docs.microsoft.com/en-us/azure/security/develop/secure-develop#test-your-application-in-an-operating-state

Perfect Answer A Static for non running code Dynamic for any running code(deployed in the infra) checks

Azure AD Conditional Access policies applies to users, not to applications. but the question is You need to recommend a solution to prevent users on a specific list of countries from connecting to the applications.

To test the Azure App Service web app for vulnerabilities such as insecure server configurations, cross-site scripting (XSS), and SQL injection, you should include in the recommendation: A. Dynamic Application Security Testing (DAST) DAST is a testing methodology that involves examining an application during its running state. It's particularly effective at identifying security vulnerabilities that are present when the application is in operation, such as the ones mentioned (insecure server configurations, XSS, SQL injection). DAST tools interact with the application from the outside, simulating an attacker's perspective, which makes them suitable for identifying these types of vulnerabilities.

A is the answer. https://learn.microsoft.com/en-us/azure/security/develop/secure-develop#test-your-application-in-an-operating-state Dynamic application security testing (DAST) is a process of testing an application in an operating state to find security vulnerabilities. DAST tools analyze programs while they are executing to find security vulnerabilities such as memory corruption, insecure server configuration, cross-site scripting, user privilege issues, SQL injection, and other critical security concerns.