Exam SY0-701 topic 1 question 489 discussion

B. Yellow Explanation: The Yellow Team is a relatively newer concept in cybersecurity testing that combines both defensive (Blue Team) and offensive (Red Team) methodologies. This team works with developers to securely build key applications and software by integrating security practices throughout the development lifecycle, also known as Secure Development Lifecycle (SDLC). Their focus is on proactively addressing vulnerabilities while also testing the application for security flaws from an attacker's perspective. Why not the other options? C. Red Team: The Red Team conducts offensive testing by simulating real-world attacks to identify vulnerabilities and weaknesses. They don't directly engage with developers to build secure applications; they focus on penetration testing and exploitation.

Yellow Team Objective: Ensure secure software and application development

The yellow team is the group that, during application building, makes sure everything is secure. it is not A) Blue team - this team is purely defensive C) Red team - this team is purely offensive D) Green team - this team attempts to improve security by automating it

The correct answer is C. Red. Red team testing involves both defensive and offensive methodologies to identify and address security vulnerabilities in applications and software