Which security analysis approach helps to find vulnerabilities in web applications while they are running in production?

• A. Dynamic Analysis
• B. Mutation
• C. Container API
• D. Secure Coding Standards

Answer: (A)

Dynamic analysis targets a web application while it’s running, interacting with it through its real interfaces and observing how it behaves with actual inputs. This runtime testing, often called dynamic application security testing (DAST), reveals vulnerabilities that only show up when the code is executing and handling live data—things like input validation gaps, authentication and session issues, authorization flaws, and misconfigurations that expose sensitive information. Since the app processes requests in a real environment, you can see how it responds to typical user actions and edge cases, which static review of the code alone can miss. This makes it the best fit for finding vulnerabilities in production-like conditions. In contrast, mutation testing changes the code to see if tests catch those alterations, container API work isn’t focused on security testing of running apps, and secure coding standards are guidelines for writing safer software rather than a method for actively probing a live application.