Question
A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?
- A. A thorough analysis of the supply chain Correct
- B. A legally enforceable corporate acquisition policy
- C. A right to audit clause in vendor contracts and SOWs
- D. An in-depth penetration test of all suppliers and vendors
Explanation
Counterfeit hardware enters through the supply chain, so a thorough supply chain analysis, verifying manufacturers, authorized distributors and the provenance of components, best addresses the risk before purchase. A right-to-audit clause lets the company inspect a vendor afterwards but does not by itself ensure genuine parts. An acquisition policy states intent without verifying sources, and penetration testing suppliers tests their networks, not the authenticity of the hardware they ship.
