Module-13 Supply Chain Assessment

What is a primary purpose of conducting a supply chain assessment in the context of cybersecurity?

• To reduce costs by finding cheaper suppliers

• To ensure the reliability and security of the components used in production

• To streamline production processes for efficiency

• To monitor the environmental impact of suppliers

Which of the following technologies is designed to ensure secure hardware components and is often integrated into motherboards to protect sensitive data?

• UEFI

• HSM

• TPM

• Self-encrypting drives

How does the concept of a "trusted foundry" contribute to supply chain security?

• A) By providing a marketplace for open-source software
  
  

• B) By ensuring hardware components are manufactured in secure, verified environments

• C) By developing software to detect malware
  
  

• C) By developing software to detect malware
  
  

What is the primary role of a Hardware Security Module (HSM) in securing a supply chain?

• To provide hardware-based encryption and cryptographic key management

• To monitor the integrity of software applications

• To manage network traffic between suppliers

• To audit software licenses

Which of the following is true about UEFI in the context of supply chain security?

• It is used to encrypt data stored on hard drives

• It replaces the traditional BIOS to provide more security features and supports secure boot

• It is a protocol for secure communication over the internet

• It is a software-based antivirus solution

Which component is specifically designed to encrypt data on a drive and decrypt it with authorized access only?

• TPM

• HSM

• UEFI

• Self-encrypting drives

Why is the concept of "Root of Trust" (ROT) critical in secure processing?

• It minimizes the processing time of applications

• It establishes a reliable foundation from which all secure operations can be built

• It provides cloud storage solutions

• It manages user permissions across a network

What is the role of a Trusted Platform Module (TPM) in enhancing the security of the supply chain?

• To manage network configurations

• To store cryptographic keys and provide hardware-based security functions

• To enhance graphical processing power

• To serve as an external storage device

Which security component would be most effective in ensuring that unauthorized firmware modifications are not made during the supply chain process?

• Self-encrypting drives

• Hardware Security Module (HSM)

• Unified Extensible Firmware Interface (UEFI) with Secure Boot

• Root of Trust (ROT)

In the context of supply chain security, which technology is responsible for performing cryptographic operations in a secure, tamper-resistant environment?

• Self-encrypting drives

• UEFI

• Hardware Security Module (HSM)

• Trusted Platform Module (TPM)