Exam SY0-701 topic 1 question 31 discussion

Actual exam question from CompTIA's SY0-701

Question #: 31
Topic #: 1

A company is expanding its threat surface program and allowing individuals to security test the company’s internet-facing application. The company will compensate researchers based on the vulnerabilities discovered. Which of the following best describes the program the company is setting up?

A. Open-source intelligence
B. Bug bounty
C. Red team
D. Penetration testing

Show Suggested Answer

Suggested Answer: B 🗳️

by Abcd123321 at May 12, 2024, 4:17 a.m.

Comments

Submit Cancel

gollum9

4 months, 1 week ago

Selected Answer: B

B. Bug bounty

upvoted 1 times

...

dbrowndiver

8 months, 2 weeks ago

Selected Answer: B

The scenario describes a program where the company invites external individuals, often called ethical hackers or researchers, to find vulnerabilities in its application and offers compensation based on the discoveries. Bug bounty programs are initiatives where organizations invite external researchers to test their software or systems for vulnerabilities. Researchers are rewarded with financial compensation, recognition, or both, based on the severity and impact of the vulnerabilities they find.

upvoted 1 times

...

Etc_Shadow28000

10 months, 1 week ago

Selected Answer: B

B. Bug bounty A bug bounty program incentivizes external security researchers to find and report vulnerabilities in a company's applications or systems. Researchers are compensated based on the severity and impact of the vulnerabilities they uncover, helping the company to improve its security posture by leveraging a wide range of expertise.

upvoted 4 times

...

Jimmy1017

11 months, 1 week ago

Selected Answer: B

B bug bounty because they’re paying non employees to find vulnerabilities.

upvoted 4 times

...

Abcd123321

11 months, 1 week ago

Selected Answer: B

Bug bounty hunters can earn money by discovering zero-day vulnerabilities

upvoted 3 times

...