Study. uk . com
  1. Home
  2. All questions
  3. Question 574

CompTIA Security+ study material · question 574 of 611

A supplier ships a product with serious flaws caused by weak development practices, with no adversary involved. Which control addresses this?

  1. Network segmentation of the product
  2. A right-to-audit clause exercised after deployment
  3. Assurance requirements written into acquisition language
  4. An increased CVSS environmental score
Show the answer

Answer: C. Assurance requirements written into acquisition language

The defect originates in how the product was built, so the leverage is in what the contract requires of the supplier.

Source: NIST SP 800-161 Rev. 1 (NIST) — SP 800-161 Rev. 1 › Abstract

Challenge yourself on this topic → Study as cards