Which type of vulnerability research focuses on application flaws in software during security testing?

• A. Network scanning
• B. Firmware analysis
• C. Social engineering
• D. Application flaws

Answer: (D)

Focusing vulnerability research on applications means scrutinizing software for weaknesses in how it processes input, enforces authentication and authorization, manages sessions, and implements its logic during security testing. This targets flaws inside the software itself, such as insecure input handling or broken access control. Network scanning, by comparison, looks at exposed services and hosts on a network rather than the internal flaws of the software. Firmware analysis examines embedded device firmware, not application software. Social engineering targets people and processes rather than technical flaws in software. Because the question highlights finding weaknesses inside software during testing, the best fit is application flaws.