Câu 16: PT1-002: CompTIA PenTest+ Certification Exam

A company that developers embedded software for the automobile industry has hired a penetration-testing team to evaluate the security of its products prior to delivery. The penetration-testing team has stated its intent to subcontract to a reverse-engineering team capable of analyzing binaries to develop proof-of-concept exploits. The software company has requested additional background investigations on the reverse-engineering team prior to approval of the subcontract. Which of the following concerns would BEST support the software company's request?

1. A. The reverse-engineering team may have a history of selling exploits to third parties. — đáp án hiện tại
2. B. The reverse-engineering team may use closed-source or other non-public information feeds for its analysis.
3. C. The reverse-engineering team may not instill safety protocols sufficient for the automobile industry.
4. D. The reverse-engineering team will be given access to source code for analysis.