Study. uk . com
  1. Home
  2. All questions
  3. Question 66

CompTIA Security+ study material · question 66 of 611

Which element of a vulnerability disclosure policy most directly encourages a good-faith researcher to report rather than stay silent?

  1. A ninety-day disclosure deadline
  2. A requirement to sign a non-disclosure agreement
  3. A safe harbour statement
  4. A cash reward table
Show the answer

Answer: C. A safe harbour statement

Safe harbour assures the researcher they will not face legal action for good-faith testing within scope.

Source: OWASP Vulnerability Disclosure Cheat Sheet (OWASP) — OWASP Vulnerability Disclosure Cheat Sheet › Safe Harbour

Challenge yourself on this topic → Study as cards