Security wants to probe a running staging build of the public parks reservation portal the way an external attacker would. Which test fits?
Select an answer to reveal the explanation.
Short Explanation
DAST is the road test—you run the car and see what rattles under real traffic-like conditions. Pointing it at staging of a public portal finds runtime issues source review alone can miss. Civic sites need that outside-in look before citizens pile on.
Full Explanation
DAST exercises a running application, typically over HTTP, to discover vulnerabilities such as injection, misconfigurations, and authentication weaknesses observable at runtime. Staging instances of public portals are appropriate targets when production data and availability constraints apply. DAST complements SAST by revealing issues that appear only when the system executes.