Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
In this scenario, the system is: SaaS-based Externally provided and supported by a third-party vendor Requires opening firewall ports to allow access This introduces a supply chain risk, because: You are trusting an external provider’s infrastructure and security Any compromise of the vendor can directly affect your environment You may be exposing internal systems to a third-party attack surface This is a classic third-party / supply chain dependency risk.
The key clue is: “supported by a SaaS provider” This introduces a third-party/vendor risk. When a company depends on an outside provider for software or services, that provider becomes part of the organization’s supply chain. Opening firewall ports for the SaaS system increases exposure to risks associated with that vendor, such as: * compromised vendor systems, * insecure integrations, * third-party breaches, * or malicious updates.
This question involve networking. Opening firewall application ports to an internet SaaS provider with your production network directly involved is very risky.