CompTIA Security+ (SY0-601) — Question 249

After installing a patch on a security appliance, an organization realized a massive data exfiltration had occurred. Which of the following BEST describes the incident?

Answer options

• A. Supply chain attack
• B. Ransomware attack
• C. Cryptographic attack
• D. Password attack

Correct answer: A

Explanation

The correct answer is A, as a supply chain attack involves compromising the software or hardware supply chain, which can occur during updates or patches. The other options do not fit this scenario; a ransomware attack typically involves data being held hostage, a cryptographic attack focuses on breaking encryption, and a password attack centers around unauthorized access through compromised credentials.