A defense contractor is procuring microprocessors for a weapons system. The contractor is concerned about the risk of malicious implants inserted during fabrication. Which hardware feature would provide the strongest assurance that the processor has not been tampered with?

A certificate of authenticity from the manufacturer

A unique serial number printed on the chip

A silicon root of trust that verifies the integrity of the device's firmware

A tamper-evident seal on the packaging

How does a software bill of materials (SBOM) help mitigate risks from third-party software components?

It allows the organization to quickly identify components affected by a known vulnerability

It guarantees that all components are free of vulnerabilities

It prevents the use of any third-party components

It automatically patches all vulnerable components

A semiconductor company wants to prevent counterfeiting of its chips. The company wants a solution that uses the unique physical characteristics of each chip to generate a unique identifier that is difficult to clone. Which technology should the company use?

Hardware security modules (HSMs)

Physically unclonable functions (PUFs)

How does a silicon root of trust help protect against counterfeit hardware?

It encrypts all data stored on the device

It makes the hardware physically impossible to copy

It increases the cost of the hardware

It provides a unique, unchangeable identity that can be verified

What is the purpose of establishing minimum security requirements for suppliers?

To require suppliers to use the same security products as the organization

To shift all security responsibility to the supplier

To ensure that all suppliers meet a baseline level of security

To eliminate the need for ongoing supplier monitoring

Certified Information Systems Security Professional

Domain 1Objective 11

1.11 - Apply Supply Chain Risk Management (SCRM) Concepts CISSP Practice Questions (Page 3)

Part of the Security and Risk Management domain, which accounts for 16% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

16%of the exam

Questions 11–15

11application · medium
A defense contractor is procuring microprocessors for a weapons system. The contractor is concerned about the risk of malicious implants inserted during fabrication. Which hardware feature would provide the strongest assurance that the processor has not been tampered with?
Select an answer first
12foundation · easy
How does a software bill of materials (SBOM) help mitigate risks from third-party software components?
Select an answer first
13application · medium
A semiconductor company wants to prevent counterfeiting of its chips. The company wants a solution that uses the unique physical characteristics of each chip to generate a unique identifier that is difficult to clone. Which technology should the company use?
Select an answer first
14foundation · easy
How does a silicon root of trust help protect against counterfeit hardware?
Select an answer first
15foundation · easy
What is the purpose of establishing minimum security requirements for suppliers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.