CompTIA Security+ (SY0-701) — Question 596

Which of the following methods would most likely be used to identify legacy systems?

Answer options

• A. Bug bounty program
• B. Vulnerability scan
• C. Package monitoring
• D. Dynamic analysis

Correct answer: B

Explanation

A vulnerability scan is designed to identify outdated software and systems that may pose security risks, making it the most effective choice for pinpointing legacy systems. The other options, such as a bug bounty program, focus on finding existing bugs, while package monitoring and dynamic analysis are more about real-time application behavior rather than system age.