Supply chain security in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What is the primary goal of supply chain security?

Choose the option that best describes the main purpose of supply chain security in cybersecurity.

A To ensure that all software and hardware components come from trusted sources and have not been tampered with.

B To speed up the delivery of products by reducing inspection times.

C To increase the number of suppliers to reduce costs.

D To focus only on physical security of warehouses and shipping centers.

💡 Hint

Think about what risks supply chain security tries to prevent.

Supply chain security aims to protect the entire chain of production and delivery from threats like tampering or counterfeit parts. This means verifying trustworthiness of all components.

📋 Factual

intermediate

Which of these is a common risk in supply chain security?

Select the risk that is most commonly associated with supply chain security breaches.

A Phishing attacks targeting end users.

B Insertion of malicious code into software updates.

C Physical theft of office computers.

D Denial of service attacks on company websites.

💡 Hint

Consider risks that happen during software or hardware delivery.

Malicious code inserted into software updates is a classic supply chain attack, where attackers compromise trusted software to spread malware.

🔍 Analysis

advanced

Analyzing a supply chain attack scenario

A company receives a software update from a trusted vendor. Later, it is discovered the update contained hidden malware. What is the most likely supply chain security failure?

A The vendor's physical warehouse was broken into.

B The company did not have a firewall installed.

C The company failed to verify the digital signature of the update.

D The company used outdated antivirus software.

💡 Hint

Think about how software authenticity is usually confirmed.

Digital signatures help verify that software updates are authentic and untampered. Failure to check them allows malware to enter unnoticed.

❓ Comparison

advanced

Comparing supply chain security controls

Which control is more effective at preventing hardware tampering during manufacturing?

A Using tamper-evident seals on hardware packaging.

B Installing antivirus software on end-user devices.

C Encrypting data in transit over the internet.

D Conducting phishing awareness training for employees.

💡 Hint

Focus on physical protection methods for hardware.

Tamper-evident seals show if hardware has been opened or altered, making them effective against physical tampering during manufacturing.

❓ Reasoning

expert

Reasoning about supply chain attack detection

A company uses multiple third-party software libraries. Which approach best helps detect if one library has been compromised?

A Allowing unrestricted internet access for all employees.

B Only updating libraries once every two years to reduce change.

C Disabling all logging to improve performance.

D Regularly verifying cryptographic hashes of the libraries against trusted sources.

💡 Hint

Think about how to confirm software integrity over time.

Verifying cryptographic hashes ensures the library files have not been altered, helping detect compromises quickly.