SC-100 Certification Practice Question #201

Question

Your company is developing a new Azure App Service web app.
You are providing design assistance to verify the security of the web app.
You need to recommend a solution to test the web app for vulnerabilities such as insecure server configurations, cross-site scripting (XSS), and SQL injection.
What should you include in the recommendation?

Accepted Answer

MS Learn lists insecure server configuration, cross-site scripting, and SQL injection as the exact vulnerability classes that DAST finds by testing a running application — a verbatim match to the question's wording. The Suggested Answer, the unanimous Most Voted (13), and the two highly voted comments all agree. SAST only inspects static, non-running code and cannot detect these runtime issues, eliminating B. The single dissent for C was mistakenly answering a different question. Every high-weight signal points to A.

More SC-100 practice questions