Which of the following describes an instance of legal hacking?(2 points)

Question

Responses

Security hacking is never legal.
Security hacking is never legal.

Looking for security risks on a product that is excluded from a bug bounty program.
Looking for security risks on a product that is excluded from a bug bounty program.

Penetration testing for a company.
Penetration testing for a company.

Grey hat hacking

Answer 1

The option that describes an instance of legal hacking is:

Penetration testing for a company.

Penetration testing is conducted with the permission of the organization and is aimed at identifying security vulnerabilities to improve the company's security posture, making it a legal and authorized form of hacking.