Supply Chain Attacks GCIL Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which scenario best illustrates a hardware implant as a supply chain attack vector?

   • AAn attacker installs a backdoor on a server after gaining physical access to the data center.
   • BA malicious chip is secretly added to a motherboard during the manufacturing process.
   • CAn attacker intercepts a network cable and taps the data flowing through it.
   • DA USB drive containing malware is left in the organization's parking lot.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following best describes the impact of a supply chain attack on availability?

   • AAn attacker steals customer credit card data from a compromised payment processor.
   • BAn attacker modifies financial records, causing incorrect transactions.
   • CAn attacker gains unauthorized access to a database and copies sensitive records.
   • DA malicious update causes critical systems to crash, preventing users from accessing services.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company discovers that a hardware component in its network switches, purchased from a reputable manufacturer, contains a malicious chip that can intercept network traffic. The company's security team must determine the best response. The switches are critical to production, and replacing them would cause significant downtime. Which action should the team take first?

   • AIgnore the issue because the manufacturer is reputable and the chip is likely benign.
   • BSue the manufacturer for damages before taking any technical action.
   • CImmediately replace all affected switches, accepting the downtime.
   • DIsolate the affected switches from sensitive network segments and monitor their traffic for signs of data exfiltration.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard · select all that apply

   A company is implementing a defense-in-depth strategy to mitigate supply chain attacks. The company uses a mix of third-party software, hardware, and services. Which controls should the company implement as part of this strategy? Select all that apply.

   • AImplement continuous monitoring of network traffic for indicators of compromise related to supply chain attacks.
   • BVerify the integrity of all third-party software updates using code signing and hash verification.
   • CDisable all third-party integrations to eliminate supply chain risk.
   • DConduct regular security assessments of third-party vendors and require contractual security commitments.
   • ERequire all vendors to provide physical access to their data centers for on-site audits.
   Check answers Discussion Select an answer first
6. 15foundation · easy

   How can a supply chain attack impact the confidentiality of an organization's data?

   • ABy allowing an attacker to exfiltrate sensitive data through a compromised supplier's software.
   • BBy causing a denial of service that prevents users from accessing the data.
   • CBy corrupting data stored in a database, making it unreliable.
   • DBy encrypting the organization's files and demanding a ransom.
   Reveal Solution Discussion Select an answer first