Question: what is the difference between static and dynamic application scanning?
Answer: Static analysis is a test of the internal structure of the application, rather than functional testing. ... Dynamic application security testing (DAST) looks at the application from the outside in — by examining it in its running state and trying to manipulate it in order to discover security vulnerabilities.