Intermediate
Cybersecurity & Cryptography
Q59 / 100
What is a supply chain attack?
Correct! Well done.
Incorrect.
The correct answer is B) Compromising software or hardware components during development, distribution, or update processes to target downstream users
B
Correct Answer
Compromising software or hardware components during development, distribution, or update processes to target downstream users
Explanation
SolarWinds, XZ Utils, npm malicious packages: attackers inject malicious code into legitimate software updates. Defenses: software bill of materials (SBOM), code signing, reproducible builds, third-party audits.
Progress
59/100