Home › Software Testing › Software Testing › advanced_security_performance › Static Application Security Testing (SAST) analy…
Static Application Security Testing (SAST) analyses
AEnd user behavior in production
BSource code without executing it
CRunning application during integration
DNetwork packets between services
Answer & Solution
Correct answer: B. Source code without executing it
SAST inspects code, bytecode or binaries at rest. Tools: SonarQube, Checkmarx, Fortify, Semgrep. It finds patterns like SQL injection, hardcoded secrets, weak crypto. DAST runs against the live app.
Related questions
Test coverage is BEST described asContinuous Testing in DevOps meansIn the V model of SDLC, system testing corresponds to'Test data' management addressesIn ISTQB terminology, a 'test oracle' isAcceptance Test Driven Development (ATDD) emphasisesTest Driven Development uses the rhythm ofRecovery testing simulates