Eccouncil 312-96 Exam - Topic 2 Question 50 Discussion

Actual exam question for Eccouncil's 312-96 exam

Question #: 50
Topic #: 2

[All 312-96 Questions]

Jacob, a Security Engineer of the testing team, was inspecting the source code to find security vulnerabilities.

Which type of security assessment activity Jacob is currently performing?

CCAST

DSAST

BHttp Basic, Form Based, Client/Server Mutual, Role Based Authentication

AISCST

Show Suggested Answer

Suggested Answer: D

by Arlie at Jan 24, 2026, 08:14 PM

Limited Time Offer

25%

Off

Get Premium 312-96 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gail

1 day ago

Code review, the security engineer's version of a treasure hunt. Good luck, Jacob!

upvoted 0 times

...

Jaime

6 days ago

I bet Jacob's finding all sorts of "fun" stuff in that code. Hopefully, he's got a good sense of humor to deal with it.

upvoted 0 times

...

Jutta

11 days ago

Ah, the joys of static code analysis! Jacob's on the right track to uncover those pesky vulnerabilities.

upvoted 0 times

...

Danilo

17 days ago

This is a classic example of a code review, which is a crucial security assessment activity.

upvoted 0 times

...

Sharan

22 days ago

Could it be a vulnerability assessment? I feel like we had a question on that in our last mock exam.

upvoted 0 times

...

Helaine

27 days ago

I remember something about dynamic assessments too, but I don't think that's what Jacob is doing here.

upvoted 0 times

...

Walton

2 months ago

This sounds like a static application security testing (SAST) activity, similar to what we practiced in class.

upvoted 0 times

...

Chu

2 months ago

I think Jacob is doing a code review, but I'm not entirely sure if that's the exact term used for it.

upvoted 0 times

...

Zana

2 months ago

Sounds like a code inspection to me. I'd start by understanding the application's architecture and flow, then dive into the code to uncover any security weaknesses. Methodical approach is key here.

upvoted 0 times

...

Goldie

2 months ago

Ah, this is a classic security code audit. I'd use a combination of manual review and automated tools to identify potential vulnerabilities. Gotta be careful not to miss anything!

upvoted 0 times

...

Jackie

2 months ago

Okay, I think this is a source code review. I'd look for things like hardcoded credentials, unsafe function calls, and lack of input validation. Gotta be thorough to find those security flaws.

upvoted 0 times

...

Jenise

3 months ago

Hmm, not sure about this one. Is it a penetration test or a vulnerability assessment? I'd need more context to determine the specific type of security assessment.

upvoted 0 times

...

Wilford

3 months ago

This looks like a code review or static code analysis. I'd start by scanning the code for common vulnerabilities like SQL injection, cross-site scripting, and insecure configurations.

upvoted 0 times

...