Exam SY0-601 topic 1 question 607 discussion

Actual exam question from CompTIA's SY0-601

Question #: 607
Topic #: 1

A company is expanding its threat surface program and allowing individuals to security test the company's internet-facing application. The company will compensate researchers based on the vulnerabilities discovered. Which of the following best describes the program the company is setting up?

A. Open-source intelligence
B. Bug bounty
C. Red team
D. Penetration testing

Show Suggested Answer

Suggested Answer: B 🗳️

by ApplebeesWaiter1122 at July 20, 2023, 1:15 a.m.

Comments

Submit Cancel

ApplebeesWaiter1122

Highly Voted 1 year, 11 months ago

Selected Answer: B

Bug bounty programs are initiatives where organizations invite external security researchers or "white-hat" hackers to find and report security vulnerabilities in their systems. Researchers are rewarded with compensation based on the severity and impact of the discovered vulnerabilities.

upvoted 15 times

...

Geronemo

Most Recent 1 year, 2 months ago

B. Bug bounty. Bug bounty programs invite independent security researchers, often referred to as "white hat hackers," to identify and report security vulnerabilities in a company's software or systems. Researchers are incentivized with monetary rewards, typically based on the severity of the vulnerabilities found. This approach can help organizations identify and address security issues before malicious actors exploit them, ultimately enhancing the overall security posture of the company's systems.

upvoted 2 times

...

64d2259

1 year, 3 months ago

Selected Answer: B

"Allowing individuals" + "The company will compensate" >> Bug bounty

upvoted 1 times

...