Certified Ethical Hacker Version 11 (CEHv11) Practice Test

Runtime Application Self-Protection is a security technology that sits inside the running application and watches its own execution in real time. It monitors data flows, code paths, and inputs as requests come in, applying security policies to detect suspicious activity that indicates an attack. When something malicious is detected, it can block or mitigate the attack immediately and provide detailed telemetry about what’s happening in the live app. This combination of real-time attack detection and visibility into the app’s vulnerabilities as it runs is what makes RASP the right choice for detecting runtime attacks in real-time applications. Other options are not designed to do this. A security misconfiguration refers to a type of vulnerability or risk, not a runtime protection mechanism. A web app security scanner like the N-Stalker is used to discover weaknesses by probing the app, not to protect and monitor it as it runs. BeEF focuses on browser exploitation and post-compromise activities, not on in-application runtime protection or real-time visibility.