Which security issue can be found only through dynamic application security testing (DAST)?

Runtime privilege issues can be identified only through dynamic application security testing (DAST). Managing Cloud principles explain that DAST evaluates applications while they are running, allowing testers to observe behavior during execution.

Runtime privileges involve how applications handle permissions, roles, and access controls in real-world conditions. These issues cannot be fully identified through static analysis because they depend on runtime context, user interactions, and environment configurations.

Code quality, null pointer dereferences, and insecure cryptographic functions can typically be detected through static testing or code review. Therefore, runtime privileges are uniquely suited for detection through DAST.