CompTIA Security+ (SY0-601) — Question 752

An attacker has determined the best way to impact operations is to infiltrate third-party software vendors. Which of the following vectors is being exploited?

Answer options

• A. Social media
• B. Cloud
• C. Supply chain
• D. Social Engineering

Correct answer: C

Explanation

The correct answer is C, Supply chain, as it refers to the risk associated with third-party vendors and their software. Options A and D, Social media and Social Engineering, focus on different methods of manipulation, while B, Cloud, pertains to a different type of technology risk and does not specifically relate to third-party vendor infiltration.