Also referred to as a whitebox testing, in which the complete system architecture (including its source code) or application/software to be tested is already known to the tester.

Also referred to as a whitebox testing, in which the complete system architecture (including its source code) or application/software to be tested is already known to the tester.

• A. Static Application Security Testing (SAST)
• B. Web application security testing
• C. Manual Web Application Security Testing
• D. Automated Web Application Security Testing

Answer: (A)

White-box testing in security means you have full visibility into the system, including the source code, architecture, and configurations, so you can inspect exactly how the software is built and how data flows through it. Static Application Security Testing is the approach that fits this scenario because it analyzes the code and artifacts without executing the program, allowing you to identify vulnerabilities directly in the source and design before runtime. This lets you spot issues like insecure coding patterns, data flow weaknesses, and misconfigurations by examining the actual codebase. The broader term web application security testing describes testing a web app in general and can encompass techniques with varying levels of access to the internals. Manual versus automated refers to how tests are carried out rather than to whether the tester has the source code. So the scenario of having complete knowledge of the system aligns best with Static Application Security Testing.

White-box testing in security means you have full visibility into the system, including the source code, architecture, and configurations, so you can inspect exactly how the software is built and how data flows through it. Static Application Security Testing is the approach that fits this scenario because it analyzes the code and artifacts without executing the program, allowing you to identify vulnerabilities directly in the source and design before runtime. This lets you spot issues like insecure coding patterns, data flow weaknesses, and misconfigurations by examining the actual codebase.

The broader term web application security testing describes testing a web app in general and can encompass techniques with varying levels of access to the internals. Manual versus automated refers to how tests are carried out rather than to whether the tester has the source code. So the scenario of having complete knowledge of the system aligns best with Static Application Security Testing.