Describe How to Create and Leverage a SBOM (Software Bill of Materials) in Cybersecurity Defenses. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A government contractor must share SBOMs with a federal agency as part of a compliance requirement. The contractor uses CycloneDX format and needs to ensure the SBOMs are not tampered with during transmission. What is the most appropriate method to share the SBOMs securely?

   • ASign the SBOM files with a digital signature and transmit them over an encrypted channel to the agency.
   • BUpload the SBOMs to a shared cloud drive with a public link.
   • CPublish the SBOMs on a public website for anyone to download.
   • DEmail the SBOM files as plain text attachments to the agency's procurement officer.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   How can an SBOM be used to identify known vulnerabilities in software components?

   • ABy analyzing the software's user interface for security flaws
   • BBy checking the software's license agreements
   • CBy running a network scan on the software
   • DBy cross-referencing the component list with vulnerability databases
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   How does an SBOM enhance cybersecurity defenses?

   • ABy encrypting all software components to prevent tampering
   • BBy automatically blocking malicious code from executing
   • CBy providing a list of all open-source licenses used in the software
   • DBy enabling organizations to quickly identify which products are affected by a newly disclosed vulnerability
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A software vendor is required to provide SBOMs to its customers as part of a new procurement contract. The vendor wants to ensure that the SBOMs are easily consumable by the customers' security tools. What is the most important consideration for the vendor?

   • AInclude only the names of the components without version numbers.
   • BUse a standard SBOM format like SPDX or CycloneDX and provide it in a machine-readable format.
   • CShare the SBOM only upon request and after a non-disclosure agreement is signed.
   • DProvide the SBOM as a PDF document for easy human reading.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   How do SBOMs contribute to regulatory compliance?

   • ABy automatically ensuring all software is free of vulnerabilities
   • BBy replacing the need for security audits
   • CBy encrypting all data in the software
   • DBy providing evidence of software component transparency, which is required by some regulations and standards
   Reveal Solution Discussion Select an answer first