Exam SY0-701 topic 1 question 31 discussion

Actual exam question from CompTIA's SY0-701

Question #: 31
Topic #: 1

A company is expanding its threat surface program and allowing individuals to security test the company’s internet-facing application. The company will compensate researchers based on the vulnerabilities discovered. Which of the following best describes the program the company is setting up?

A. Open-source intelligence
B. Bug bounty
C. Red team
D. Penetration testing

Show Suggested Answer

Suggested Answer: B 🗳️

by Abcd123321 at May 12, 2024, 4:17 a.m.

Comments

Submit Cancel

gollum9

6 months, 3 weeks ago

Selected Answer: B

B. Bug bounty

upvoted 1 times

...

dbrowndiver

11 months ago

Selected Answer: B

The scenario describes a program where the company invites external individuals, often called ethical hackers or researchers, to find vulnerabilities in its application and offers compensation based on the discoveries. Bug bounty programs are initiatives where organizations invite external researchers to test their software or systems for vulnerabilities. Researchers are rewarded with financial compensation, recognition, or both, based on the severity and impact of the vulnerabilities they find.

upvoted 1 times

...

Etc_Shadow28000

1 year ago

Selected Answer: B

B. Bug bounty A bug bounty program incentivizes external security researchers to find and report vulnerabilities in a company's applications or systems. Researchers are compensated based on the severity and impact of the vulnerabilities they uncover, helping the company to improve its security posture by leveraging a wide range of expertise.

upvoted 4 times

...

Jimmy1017

1 year, 1 month ago

Selected Answer: B

B bug bounty because they’re paying non employees to find vulnerabilities.

upvoted 4 times

...

Abcd123321

1 year, 1 month ago

Selected Answer: B

Bug bounty hunters can earn money by discovering zero-day vulnerabilities

upvoted 3 times

...