1.11 - Apply Supply Chain Risk Management (SCRM) Concepts CISSP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A manufacturing company is selecting a new supplier for industrial control system components. The company has a strict security policy and wants to reduce the risk of counterfeit or tampered products entering its environment. Which approach best addresses this concern?

   • AEstablish minimum security requirements for the supplier, including tamper-evident packaging and provenance documentation.
   • BRequire the supplier to provide a list of all their customers for reference checks.
   • CAsk the supplier to sign a non-disclosure agreement (NDA) to protect proprietary information.
   • DChoose the supplier with the lowest cost, as long as they have a website and a physical address.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a physically unclonable function (PUF)?

   • AA software algorithm that generates random passwords
   • BA cryptographic protocol for secure communication
   • CA hardware function that derives a unique identifier from physical variations in the chip
   • DA type of firewall that prevents unauthorized access
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is an example of a service level requirement?

   • AThe supplier must use a specific encryption algorithm
   • BThe supplier must have a data center in a specific country
   • CThe supplier must achieve 99.9% uptime for the service
   • DThe supplier must provide a monthly invoice
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of a silicon root of trust in hardware?

   • ATo provide wireless connectivity for the device
   • BTo reduce the power consumption of the device
   • CTo increase the processing speed of the device
   • DTo provide a hardware-based foundation for verifying the integrity of the device
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does continuous monitoring of suppliers help mitigate supply chain risks?

   • AIt detects changes in the supplier's security posture over time
   • BIt guarantees that the supplier will never suffer a security breach
   • CIt transfers the risk to the supplier's insurance provider
   • DIt eliminates the need for any contractual security requirements
   Reveal Solution Discussion Select an answer first