CS0-003 · Question #449
A company's internet-facing web application has been compromised several times due to identified design flaws. The company would like to minimize the risk of these incidents from reoccurring and has p
The correct answer is C. Contracting a penetration test E. Creating a bug bounty program. To identify existing vulnerabilities in the web application, the best options are to contract a penetration test and create a bug bounty program. A penetration test simulates attacks against the application to uncover security flaws proactively. A bug bounty program incentivizes
Question
A company's internet-facing web application has been compromised several times due to identified design flaws. The company would like to minimize the risk of these incidents from reoccurring and has provided the developers with better security training. However, the company cannot allocate any more internal resources to the issue. Which of the following are the best options to help identify flaws within the system? (Choose two.)
Options
- ADeploying a WAF
- BPerforming a forensic analysis
- CContracting a penetration test
- DHolding a tabletop exercise
- ECreating a bug bounty program
- FImplementing threat modeling
How the community answered
(28 responses)- B14% (4)
- C79% (22)
- D4% (1)
- F4% (1)
Explanation
To identify existing vulnerabilities in the web application, the best options are to contract a penetration test and create a bug bounty program. A penetration test simulates attacks against the application to uncover security flaws proactively. A bug bounty program incentivizes external security researchers to find and report vulnerabilities, expanding the testing scope without overburdening internal resources.
Topics
Community Discussion
No community discussion yet for this question.