Study. uk . com
  1. Home
  2. All questions
  3. Question 36

CompTIA Security+ study material · question 36 of 611

Which three problems does cybersecurity supply chain risk management address in products and services an organisation acquires?

  1. Data residency, retention periods, and lawful access
  2. Licence violations, export controls, and patent disputes
  3. Late delivery, cost overrun, and vendor insolvency
  4. Malicious functionality, counterfeit parts, and weakness from poor development practices
Show the answer

Answer: D. Malicious functionality, counterfeit parts, and weakness from poor development practices

Those three are the recognised supply chain concerns. The others are commercial or legal issues rather than supply chain cybersecurity.

Source: NIST SP 800-161 Rev. 1 (NIST) — SP 800-161 Rev. 1 › Abstract

Challenge yourself on this topic → Study as cards