Bird
0
0

A company wants to ensure that all software components from various suppliers are safe before integration. Which multi-step approach best applies supply chain security principles?

hard🚀 Application Q8 of 15
Cybersecurity - Emerging Security Topics
A company wants to ensure that all software components from various suppliers are safe before integration. Which multi-step approach best applies supply chain security principles?
AAccept all software components without checks to save time
BOnly check software from the largest supplier
CVerify digital signatures, audit supplier security practices, and scan for malware
DUse software without updates to avoid new risks
Step-by-Step Solution
Solution:

  1. Step 1: Identify key supply chain security steps

    Verification, auditing, and scanning are essential to ensure software safety.

  2. Step 2: Evaluate options for best practice

    Verify digital signatures, audit supplier security practices, and scan for malware combines multiple security checks, while others ignore risks or limit checks.

  3. Final Answer:

    Verify digital signatures, audit supplier security practices, and scan for malware -> Option C

  4. Quick Check:

    Best approach = Multi-step verification and auditing [OK]
Quick Trick: Combine verification, auditing, and scanning for safety [OK]
Common Mistakes:
MISTAKES
  • Skipping verification steps
  • Trusting only large suppliers
  • Avoiding updates thinking they cause risks

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes
Advanced Threat Protection - Threat hunting techniques - Quiz 8hard Digital Forensics - Network forensics - Quiz 10hard Digital Forensics - Why forensics preserves evidence - Quiz 9hard Digital Forensics - Network forensics - Quiz 8hard Digital Forensics - Mobile device forensics - Quiz 1easy Digital Forensics - Disk imaging and analysis - Quiz 4medium Emerging Security Topics - Quantum computing threats to cryptography - Quiz 13medium Incident Response - Detection and analysis phase - Quiz 4medium Incident Response - Incident documentation - Quiz 1easy Security Architecture and Design - Secure SDLC practices - Quiz 15hard