Exam 312-97 Topic 6 Question 53 Discussion

Actual exam question for ECCouncil's 312-97 exam
Question #: 53
Topic #: 6
During a software development sprint, Maria, a DevSecOps team lead, is responsible for implementing a security strategy to identify vulnerabilities in the software lifecycle. After assessing her team's workflow, she realizes during development, they need a security approach that can identify logic errors and data flow issues early, before the application is deployed. During production, they require a real-time security mechanism to detect runtime threats and prevent active attacks without disrupting normal application functionality. Which combination of security testing methods should Maria recommend to meet both requirements effectively?

Suggested Answer: D Vote an answer

SAST runs on source code early in development, catching logic errors and data flow issues before deployment. RASP runs inside the application in production, detecting and blocking runtime attacks in real time without disrupting normal functionality. This combination covers both of Maria's requirements; DAST/IAST mixes do not provide the production self-protection she needs.

by Kerwin at Oct 08, 2026, 08:48 AM

Limited Time Offer

15%

Off

Get Premium 312-97 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10