For a complex city case-management application, testers want runtime insight combined with code-level analysis during functional tests. Which approach matches?
Select an answer to reveal the explanation.
Short Explanation
IAST sits in the middle—watching the app while real test traffic runs, with enough insides to explain why something broke. For complex municipal apps, that combo of runtime and analysis is gold. It is not "skip testing"; it is smarter testing.
Full Explanation
IAST instruments a running application during automated or manual tests to correlate runtime behavior with code paths and known weakness patterns. It blends aspects of dynamic observation with deeper application context than black-box DAST alone. Complex civic applications often benefit from IAST as part of a layered testing strategy.