036_Supply Chain Vulnerabilities – CompTIA Security+

Front

What does the supply chain include?

Back

All steps from raw materials to product delivery

Front

Why is every step in the supply chain a security concern?

Back

Each step is a potential attack vector

Front

What is a danger of assuming trust in the supply chain?

Back

Unverified suppliers can inject exploits

Front

What can happen if a third-party IT service is compromised?

Back

Sensitive data may be exposed.

Front

Why are security audits included in third-party contracts?

Back

To ensure the third party maintains proper security

Front

How did attackers first breach Target in 2013?

Back

Through a phishing attack on an HVAC vendor

Front

What was a critical mistake in Target’s network setup?

Back

No segmentation between HVAC and register systems

Front

What type of malware was used in the Target breach?

Back

Register-based malware for stealing card data

Front

What is a hardware supply chain risk?

Back

New devices may have preloaded vulnerabilities

Front

What should organizations do before using new hardware?

Back

Treat it as untrusted until verified