CompTIA CySA+ (CS0-003) — Question 377

A company received a shipment of new network switches. Immediately after installing the switches, a security analyst notices suspicious traffic coming from one of the new switches. Which of the following best describes the threat actor?

Answer options

• A. Insider threat
• B. Supply chain
• C. Nation-state
• D. Organized crime

Correct answer: B

Explanation

The correct answer is B, as the suspicious traffic could indicate that the switches were compromised before delivery, suggesting a supply chain attack. The other options, such as insider threat, nation-state, and organized crime, do not specifically relate to the vulnerabilities introduced during the supply chain process.