Examkin

Soru

Zorluk: ZorThird-Party Risk Management and Supply Chain Oversight

An organization discovers that a third-party networking vendor's internal build pipeline was compromised, allowing an attacker to push malicious, validly signed firmware updates directly to customer appliances via automated update channels. Which of the following supply chain risk management practices would have MOST effectively prevented the execution of the tampered firmware package within the organization's environment?

  1. Staging and sandbox testing of all vendor updates alongside out-of-band cryptographic hash verification prior to enterprise distributionCevap
  2. B
    Configuring endpoint firewalls and intrusion prevention systems to validate the vendor's digital signature against a public Certificate Revocation List
  3. C
    Requiring all tier-1 hardware vendors to provide an annual SOC 2 Type II audit attestation report
  4. D
    Executing an Interconnection Security Agreement (ISA) that mandates immediate breach disclosure from the third-party vendor

Cevap

Staging and sandbox testing of all vendor updates alongside out-of-band cryptographic hash verification prior to enterprise distribution
Staging updates in an isolated test environment combined with out-of-band hash verification establishes a defense-in-depth barrier. It prevents zero-day supply chain modifications from being automatically pushed directly to production systems even when signed by an abused vendor key.

Adım Adım Çözüm

1
Analyze the threat scenario and failure point
The attacker compromised the vendor's code-signing pipeline, rendering standard digital signature verification ineffective because the signature itself was valid.
When a legitimate code-signing key is stolen or abused at the source, automated signature checks fail to detect unauthorized code changes.
2
Evaluate technical supply chain mitigation controls
Out-of-band hash verification (verifying hashes published via separate, secure channels) combined with isolated staging and sandbox testing will detect anomalous binary behavior and payload discrepancy before production rollout.
Staging prevents automated push deployment, and out-of-band verification ensures secondary validation independent of the primary delivery network.
3
Differentiate governance contracts from technical preventive controls
Contractual agreements (ISA) and audit attestations (SOC 2) provide governance oversight but do not offer technical control boundaries to stop execution of tainted binaries.
Technical supply chain attacks must be countered with technical validation controls.

Anahtar Kavram

Software and Hardware Supply Chain Integrity Verification
Bu soruyu puanla

Konular

Third-Party Risk Management and Supply Chain Oversight

Bu konudan daha fazla soru