5d • 🙋♂️ CISSP
CISSP Practice Question (Domain 6: Security Assessment and Testing)
A fintech board wants a bug bounty live before a funding round in 30 days. No vulnerability disclosure policy exists and internet-facing assets were never inventoried. What should the security manager do FIRST?
A. Launch a private bounty limited to the main web application
B. Run an authenticated vulnerability scan of all production systems
C. Define the disclosure policy and scope the assets in play
D. Hire an external firm to penetration test before launch
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
3
12 comments
CISSP Practice Question (Domain 6: Security Assessment and Testing)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+33
2
+31
3
+28
4
+28
5
+26
Powered by