A company is expanding its threat surface program and allowing individuals to security test the company's internet-facing application. The company will compensate researchers based on the vulnerabilit

The correct answer is B. Bug bounty. A bug bounty is a program that rewards security researchers for finding and reporting vulnerabilities in an application or system. Bug bounties are often used by companies to improve their security posture and incentivize ethical hacking. A bug bounty program typically defines th

Submitted by tarun92· Mar 6, 2026Security program management and oversight

Question

A company is expanding its threat surface program and allowing individuals to security test the company's internet-facing application. The company will compensate researchers based on the vulnerabilities discovered. Which of the following best describes the program the company is setting up?

Options

AOpen-source intelligence
BBug bounty
CRed team
DPenetration testing

How the community answered

(16 responses)

A
6% (1)
B
88% (14)
C
6% (1)

Explanation

A bug bounty is a program that rewards security researchers for finding and reporting vulnerabilities in an application or system. Bug bounties are often used by companies to improve their security posture and incentivize ethical hacking. A bug bounty program typically defines the scope, rules, and compensation for the researchers.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice