PCDRA practice question 2 of 15

What is the purpose of targeting software vendors in a supply-chain attack?

Full set: 91 questions

Answer options

A: to take advantage of a trusted software delivery method. Correct answer

B: to steal users’ login credentials.

C: to access source code.

D: to report Zero-day vulnerabilities.

Correct Answer:

A. to take advantage of a trusted software delivery method.

Explanation

A supply chain attack is a type of cyberattack that targets a trusted third-party vendor who offers services or software vital to the supply chain. Software supply chain attacks inject malicious code into an application in order to infect all users of an app. The purpose of targeting software vendors in a supply-chain attack is to take advantage of a trusted software delivery method, such as an update or a download, that can reach a large number of potential victims. By compromising a software vendor, an attacker can bypass the security measures of the downstream organizations and gain access to their systems, data, or networks. Reference: What Is a Supply Chain Attack? - Definition, Examples & More | Proofpoint US What Is a Supply Chain Attack? - CrowdStrike What Is a Supply Chain Attack? | Zscaler What Is a Supply Chain Attack? Definition, Examples & Prevention

Keep practicing

Take the free PCDRA practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test