MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

A supply chain attack in cybersecurity primarily targets what component?
a. Internal user accounts
b. Network firewalls
c. Third-party vendors or service providers
d. Physical access points
Answer: c. Third-party vendors or service providersvectra
The SolarWinds attack was a classic example of which type of supply chain compromise?
a. Hardware tampering
b. Software update hijacking
c. Insider abuse
d. Phishing campaign
Answer: b. Software update hijackingbluevoyant
In a supply chain attack, attackers insert malicious code into what kind of legitimate element?
a. Antivirus databases
b. Software updates
c. Encrypted files
d. System documentation
Answer: b. Software updatesbluevoyant
The Kaseya attack leveraged ransomware to exploit what vulnerability?
a. Poor patch management
b. Compromised software update
c. Misconfigured firewall
d. Weak password policy
Answer: b. Compromised software updatebluevoyant
Which company was hit by a Magecart-based supply chain attack?
a. Apple
b. Microsoft
c. British Airways
d. Uber
Answer: c. British Airwaysbluevoyant
The 3CX supply chain attack used what method of compromise?
a. Signed malicious certificates
b. SQL injection
c. Password dumping
d. DDoS overload
Answer: a. Signed malicious certificatesoutshift.cisco
Why are IT service providers common targets of supply chain attacks?
a. They lack customers
b. They provide indirect access to many clients
c. They work offline
d. They use unlicensed software
Answer: b. They provide indirect access to many clientscyble
Which 2025 incident exposed 6 million records through Oracle Cloud?
a. Atlassian breach
b. 3CX attack
c. Oracle Cloud breach
d. Codecov incident
Answer: c. Oracle Cloud breachcloudsek
A Zero Trust Architecture (ZTA) helps prevent supply chain attacks by enforcing what principle?
a. Implicit trust for partners
b. Constant verification of access requests
c. Centralized key storage
d. Automated password resets
Answer: b. Constant verification of access requestsminiorange
Honeytokens are used in supply chain defense to accomplish what?
a. Encrypt vendor traffic
b. Lure and detect attackers
c. Block spam emails
d. Rotate encryption keys
Answer: b. Lure and detect attackersminiorange
Privileged Access Management (PAM) minimizes what type of supply chain risk?
a. Insider data theft
b. Compromised credentials abuse
c. Hardware tampering
d. Physical device loss
Answer: b. Compromised credentials abuseminiorange
The Mimecast attack targeted what component?
a. SSL certificates
b. DNS records
c. Cloud backups
d. Admin passwords
Answer: a. SSL certificatesbluevoyant
The Codecov supply chain attack compromised what software tool?
a. CI/CD Testing Script
b. Network scanner
c. Antivirus engine
d. Firewall dashboard
Answer: a. CI/CD Testing Scriptbluevoyant
What year did supply chain attacks double in frequency, according to Cyble?
a. 2020
b. 2023
c. 2025
d. 2024
Answer: c. 2025cyble
Supply chain attacks most often affect which industries?
a. Retail only
b. IT and software sectors
c. Agriculture
d. Power grid only
Answer: b. IT and software sectorscyble
Atlassian vulnerabilities exploited in supply chain attacks involved what mechanism?
a. Single Sign-On (SSO) abuse
b. Cloud misconfiguration
c. Privilege escalation
d. Code signing
Answer: a. Single Sign-On (SSO) abusebluevoyant
Who discovered the fake dependency package vulnerability targeting major companies?
a. Alex Birsan
b. Evan Blass
c. Brian Krebs
d. Edward Snowden
Answer: a. Alex Birsanbluevoyant
In the SolarWinds breach, attackers were able to gain what type of access?
a. Root system privileges
b. Remote administrative access
c. Encrypted storage bypass
d. BIOS modification
Answer: b. Remote administrative accessbluevoyant
A key prevention strategy is to group vendors based on what factor?
a. Branding value
b. Risk profile and data access
c. Geographic origin
d. Legal agreements
Answer: b. Risk profile and data accessbluevoyant
What can happen if unsupported IoT devices are present in a supply chain?
a. Easier compromise due to lack of patches
b. Faster network speed
c. Improved safety
d. Enhanced transparency
Answer: a. Easier compromise due to lack of patchessharedassessments
A vendor attack targets what element in a supply chain?
a. End users directly
b. Third-party service providers
c. Blockchain contracts
d. IP addresses
Answer: b. Third-party service providersyoutube
Which attack technique compromises frequently visited websites?
a. Watering hole attack
b. Denial of service
c. Password spraying
d. Credential stuffing
Answer: a. Watering hole attackyoutube
Supply chain attackers exploit what major business behavior?
a. Overreliance on external providers
b. Excessive internal audits
c. Encrypted traffic
d. Backup redundancy
Answer: a. Overreliance on external providersvectra
What primary motivation drives modern supply chain attackers?
a. Ransom and data theft
b. Spam marketing
c. Random mischief
d. Network optimization
Answer: a. Ransom and data theftcyble
The MOVEit breach involved which type of supply chain attack vector?
a. File transfer software vulnerability
b. IoT firmware alteration
c. Supply logistics hacking
d. Insider threat
Answer: a. File transfer software vulnerabilityoligo
The Okta supply chain attack resulted in theft of what?
a. Customer support data
b. Hardware circuits
c. API tokens only
d. Internal passwords only
Answer: a. Customer support dataoutshift.cisco
3CX’s compromised build environment allowed attackers to do what?
a. Execute malicious code
b. Redirect DNS traffic
c. Modify SSL handshakes
d. Encrypt archivists
Answer: a. Execute malicious codeoutshift.cisco
Which of the following is NOT a typical supply chain defense strategy?
a. Zero Trust implementation
b. Vendor risk assessment
c. Ignoring minor vulnerabilities
d. Honeytoken deployment
Answer: c. Ignoring minor vulnerabilitiesminiorange
Supply chain attack prevention requires mapping what?
a. Supplier interactions and dependencies
b. Remote user profiles
c. Website analytics
d. Customer databases
Answer: a. Supplier interactions and dependenciesbluevoyant
The concept of Zero Trust eliminates which assumption?
a. All traffic is benign
b. All users are authenticated
c. External malware threats
d. Biometric accuracy
Answer: a. All traffic is benignminiorange
Which defensive technology helps detect malware introduced through third-party updates?
a. Endpoint detection and response
b. CAPTCHA validation
c. Proxy rotation
d. DNS caching
Answer: a. Endpoint detection and responseupguard
Cybercriminals often target suppliers because they present what?
a. The lowest barrier to entry
b. Highest encryption standards
c. Redundant systems
d. Isolated networks
Answer: a. The lowest barrier to entrysharedassessments
What is a recent trend observed with supply chain attacks in 2025?
a. Decrease due to awareness
b. Doubling in frequency
c. Complete elimination
d. Shift to physical theft
Answer: b. Doubling in frequencycyble
Which type of flow is vulnerable to supply chain exploitation?
a. Only physical shipments
b. Virtual flow of software and data
c. Social interactions
d. Marketing operations
Answer: b. Virtual flow of software and databluevoyant
Poor patch management in vendor software may lead to exploitation of what?
a. Zero-day vulnerabilities
b. Strong encryption
c. Safe web browsing
d. BIOS locks
Answer: a. Zero-day vulnerabilitiescyble
The JetBrains TeamCity vulnerability enabled what?
a. Remote code execution
b. Service disruption
c. Phishing
d. Identity theft
Answer: a. Remote code executionoutshift.cisco
Spreading ransomware via compromised vendor tools aims to maximize what?
a. Downstream impact
b. Encryption speeds
c. CPU utilization
d. Redundancy
Answer: a. Downstream impactcyble
In prevention, vendors should be asked to share what information with buyers?
a. Cybersecurity readiness level
b. Business history
c. Employee birthdays
d. Marketing budgets
Answer: a. Cybersecurity readiness levelmxdusa
Supply chain resilience means designing systems that can?
a. Operate even after vendor compromise
b. Disable all integrations
c. Ignore new updates
d. Depend solely on trust
Answer: a. Operate even after vendor compromisebluevoyant
Attackers tampering with hardware components are engaging in what?
a. Physical supply chain attack
b. Network sniffing
c. DNS hijacking
d. Keylogging
Answer: a. Physical supply chain attackbluevoyant
Which prevention method guards against unauthorized privileged actions?
a. Privileged Access Management
b. VPN encryption
c. SSL downgrade
d. Email filtering
Answer: a. Privileged Access Managementminiorange
Supply chain risk assessments should include what processes?
a. Vendor classification and prioritization
b. Social engineering tests only
c. Spam control
d. Static site audits
Answer: a. Vendor classification and prioritizationbluevoyant
The result of the Maersk shipping cyberattack was?
a. Business network disruption
b. Faster operations
c. Product demand drop
d. None
Answer: a. Business network disruptionsharedassessments
Advanced malware prevention tools protect against what?
a. Malicious software from vendor packages
b. Human error
c. Physical theft
d. Water damage
Answer: a. Malicious software from vendor packagesminiorange
Exploit campaigns against third-party libraries are sometimes called?
a. Dependency confusion attacks
b. SSL spoofing
c. Port scanning
d. Man-in-the-browser
Answer: a. Dependency confusion attacksbluevoyant
Ransomware groups exploit supply chains to increase?
a. Financial leverage via multiple victims
b. Password strength
c. Data backup frequency
d. Encryption entropy
Answer: a. Financial leverage via multiple victimscyble
Which organizations are most affected by compromised build environments?
a. Software developers
b. Hardware manufacturers
c. Social platforms
d. Retail stores
Answer: a. Software developersoutshift.cisco
Updating unsupported IoT firmware prevents what?
a. Exploitable vulnerabilities
b. Power waste
c. Data compression
d. System restart
Answer: a. Exploitable vulnerabilitiessharedassessments
Supply chain attacks exploiting Microsoft components have mainly targeted?
a. Exchange and web services
b. Windows installers only
c. Edge browser
d. Office scripts
Answer: a. Exchange and web servicesbluevoyant
The ultimate goal of supply chain security is to ensure what?
a. Trust and integrity across vendor networks
b. Profit maximization
c. System slowdown
d. Public exposure
Answer: a. Trust and integrity across vendor networksvectra

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info