Supply Chain Attacks GCIL Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A manufacturing company uses a specialized industrial control system (ICS) vendor for its assembly line. The vendor releases a critical security patch for the ICS software. The company's IT manager wants to verify the patch's authenticity before deployment. Which action provides the strongest assurance that the patch is legitimate and unmodified?

   • AVerify the patch's digital signature against the vendor's public key
   • BConfirm the patch was downloaded over HTTPS from the vendor's site
   • CCheck the patch file size against the vendor's website
   • DCompare the patch's SHA-256 hash with a hash posted on a third-party forum
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   A government contractor discovers that a hardware component in its new servers was intercepted during shipping and replaced with a counterfeit that includes a hidden backdoor. Which supply chain attack vector does this scenario describe?

   • ACompromised software update
   • BHardware implant
   • CInsider threat
   • DThird-party service vulnerability
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A financial services firm relies on a SaaS provider for customer relationship management. The firm's security team wants to implement a practical supply chain risk management control that addresses the provider's security posture. Which action is most aligned with vendor risk management best practices?

   • ARequire the SaaS provider to grant the firm full administrative access to the provider's production environment.
   • BPurchase cyber insurance that covers losses from third-party breaches.
   • CAsk the SaaS provider to sign a non-disclosure agreement that prohibits them from sharing the firm's data with any third party.
   • DPerform a structured security assessment of the SaaS provider, including review of their security certifications and incident response capabilities.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company's security team is investigating a potential supply chain attack. They have identified that a software library used in their application was recently updated, and the new version contains suspicious code. The update was downloaded from the vendor's official repository. Which action should the team take first?

   • AIgnore the suspicious code because it came from the official repository
   • BImmediately notify all customers of the potential breach
   • CDelete the suspicious library from the repository
   • DQuarantine the affected application and conduct a forensic analysis of the suspicious library
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is evaluating its supply chain risk management program. The company uses a critical SaaS provider for email and collaboration. The provider has a strong security program but has suffered two minor outages in the past year. The company's leadership wants to reduce the risk of a supply chain attack without significantly increasing costs. Which approach is most balanced?

   • ARequire the provider to implement multi-factor authentication for all users, including the company's users.
   • BBuild an in-house email and collaboration system to eliminate the third-party risk.
   • CAccept the risk without any additional controls because the provider has a strong security program.
   • DImplement a vendor risk management program that includes periodic security assessments and contractual security requirements.
   Reveal Solution Discussion Select an answer first