Question

During the scanning phase of pen testing, which of the following method analyzes an application’s code to determine its behavior during runtime?

Answer 1

Answer:

‘Static Analysis’ is the method that analyzes an application’s code to determine its behavior during run-time, during the scanning phase of pen-testing.

Explanation:

A penetration/pen testing is considered to be a testing practice used for checking vulnerabilities in a network or web application. It comprises of five stages. The scanning phase is one such stage, where it involves two methods namely static analysis and dynamic analysis.

The static analysis evaluates the application code and estimates its behavior while running. But, the dynamic analysis evaluates the application code in a running time i.e providing a real-time schema into the performance of that application.