Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A supply chain attack occurs when a trusted third-party component—such as a software update, library, or vendor system—is compromised and used to infiltrate multiple organizations. In this case, the malicious update was distributed through a legitimate channel, affecting many organizations that rely on the same platform. This type of attack exploits trust in the software provider and can have widespread impact, as seen in incidents like SolarWinds or NotPetya.
Supply chain attacks exploit vulnerabilities in the network of trusted vendors or suppliers to compromise multiple organizations, often through malicious code injection or software updates, with the goal of data theft, sabotage, or ransomware.
This is similar to the recent crowd strike update, hence the answer is Supply Chain