Security testing tools overview in Testing Fundamentals - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main purpose of security testing tools?

Security testing tools help find weaknesses in software to protect it from attacks and unauthorized access.

beginner

Name a popular open-source tool used for web application security testing.

OWASP ZAP (Zed Attack Proxy) is a popular open-source tool used to find security vulnerabilities in web applications.

beginner

What does a vulnerability scanner do?

A vulnerability scanner automatically checks software or systems for known security weaknesses.

intermediate

Explain the role of penetration testing tools.

Penetration testing tools simulate attacks on software to find security holes before real attackers do.

intermediate

What is the difference between static and dynamic security testing tools?

Static tools analyze code without running it, while dynamic tools test the running application to find security issues.

Which tool is commonly used for automated vulnerability scanning?

A JMeter

B Nessus

C Selenium

D Postman

Nessus is a well-known automated vulnerability scanner used to detect security issues.

What type of testing does OWASP ZAP primarily support?

A Web application security testing

B Performance testing

C Unit testing

D Load testing

OWASP ZAP is designed to find security vulnerabilities in web applications.

Which of the following is a feature of penetration testing tools?

A Measure response time

B Check spelling errors

C Simulate real attacks

D Generate user reports

Penetration testing tools simulate real attacks to find security weaknesses.

Static Application Security Testing (SAST) tools analyze code when:

A The application is running

B Only after deployment

C During user interaction

D The code is not running

SAST tools analyze source code without executing it.

Dynamic Application Security Testing (DAST) tools test:

A The running application

B Only the database

C The source code

D The network hardware

DAST tools test the application while it is running to find security issues.

Describe three common types of security testing tools and their purposes.

Think about tools that scan, attack, or analyze code.

Explain why it is important to use both static and dynamic security testing tools.

Consider when each tool works and what it can find.