Examkin

Question

Difficulty: EasyThird-Party Risk Management and Supply Chain Oversight

A security technician is inspecting newly received enterprise network switches to ensure they were not modified or tampered with by an unauthorized party during transit from the manufacturer. Which of the following supply chain security practices should the technician perform?

  1. Inspect the tamper-evident packaging seals and verify device serial numbers against the vendor's shipping manifestAnswer
  2. B
    Require the hardware vendor to execute an updated Memorandum of Understanding before deployment
  3. C
    Establish an Interconnection Security Agreement to govern data exchange between the devices
  4. D
    Configure network access control list rules to restrict inbound administrative traffic to the switches

Answer

Inspect the tamper-evident packaging seals and verify device serial numbers against the vendor's shipping manifest
Verifying physical tamper-evident packaging seals and cross-referencing hardware serial numbers against manufacturer documentation ensures that physical equipment was not intercepted, altered, or replaced with counterfeit parts during supply chain transit.

Step-by-Step Solution

1
Identify the primary threat in the scenario
The primary threat is physical supply chain tampering or counterfeit hardware substitution during transportation.
Security controls must specifically target physical inspection and authenticity verification.
2
Evaluate the appropriate physical and operational supply chain control
Checking physical tamper-evident seals confirms physical integrity, while validating serial numbers against official vendor manifests confirms device authenticity.
Contractual agreements and logical network controls cannot verify physical hardware state upon receipt.

Key Concept

Supply Chain Hardware Integrity and Tamper Verification
Rate this question

Topics

Third-Party Risk Management and Supply Chain Oversight

More questions from this topic