Eccouncil 312-96 Exam - Topic 2 Question 50 Discussion

Actual exam question for Eccouncil's 312-96 exam

Question #: 50
Topic #: 2

[All 312-96 Questions]

Jacob, a Security Engineer of the testing team, was inspecting the source code to find security vulnerabilities.

Which type of security assessment activity Jacob is currently performing?

CCAST

DSAST

BHttp Basic, Form Based, Client/Server Mutual, Role Based Authentication

AISCST

Show Suggested Answer

Suggested Answer: D

by Arlie at Jan 24, 2026, 08:14 PM

Limited Time Offer

25%

Off

Get Premium 312-96 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Walton

5 days ago

This sounds like a static application security testing (SAST) activity, similar to what we practiced in class.

upvoted 0 times

...

Chu

10 days ago

I think Jacob is doing a code review, but I'm not entirely sure if that's the exact term used for it.

upvoted 0 times

...

Zana

15 days ago

Sounds like a code inspection to me. I'd start by understanding the application's architecture and flow, then dive into the code to uncover any security weaknesses. Methodical approach is key here.

upvoted 0 times

...

Goldie

20 days ago

Ah, this is a classic security code audit. I'd use a combination of manual review and automated tools to identify potential vulnerabilities. Gotta be careful not to miss anything!

upvoted 0 times

...

Jackie

25 days ago

Okay, I think this is a source code review. I'd look for things like hardcoded credentials, unsafe function calls, and lack of input validation. Gotta be thorough to find those security flaws.

upvoted 0 times

...

Jenise

1 month ago

Hmm, not sure about this one. Is it a penetration test or a vulnerability assessment? I'd need more context to determine the specific type of security assessment.

upvoted 0 times

...

Wilford

1 month ago

This looks like a code review or static code analysis. I'd start by scanning the code for common vulnerabilities like SQL injection, cross-site scripting, and insecure configurations.

upvoted 0 times

...