セキュリティアナリストがJavaで書かれた新しいアプリケーションを評価しています。セキュリティアナリストは、実行時に存在する脆弱性を特定する必要があります。次のうち、目的を達成しつつ最も網羅的な脆弱性リストを提供できるのはどれでしょうか?
正解:B
Dynamic analysis is the most appropriate technique for assessing vulnerabilities during runtime.
It involves testing the application while it is running, which allows the security analyst to observe the application's behavior, detect vulnerabilities that emerge during execution, and understand how the application interacts with its environment. This provides a comprehensive view of vulnerabilities that may not be detected through static code analysis, as it accounts for issues like memory corruption, data leaks, and runtime exceptions.