Which of the following assurance approaches is MOST effective in identifying vulnerabilities within an application programming interface (API) transferring personal data?

The correct answer is C. Bug bounty program. A bug bounty program is an assurance approach that involves offering rewards to external security researchers who find and report vulnerabilities in an API or other software. A bug bounty program can be more effective than other assurance approaches in identifying API…

Privacy Architecture

Question

Options

ASource code review
BSecurity audit
CBug bounty program
DTabletop simulation

How the community answered

(30 responses)

A
13% (4)
B
3% (1)
C
77% (23)
D
7% (2)

Explanation

A bug bounty program is an assurance approach that involves offering rewards to external security researchers who find and report vulnerabilities in an API or other software. A bug bounty program can be more effective than other assurance approaches in identifying API vulnerabilities because it leverages the skills, creativity, and diversity of a large pool of ethical hackers who can test the API from different perspectives and scenarios. A bug bounty program can also incentivize continuous testing and reporting of vulnerabilities, which can help improve the security posture of the API over time.

Topics

#API Security#Vulnerability Management#Bug Bounty Programs#Assurance Methods

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice