Which of the following is the MOST likely source of the breach?

A company recently experienced a major breach. An investigation concludes that customer credit card data was stolen and exfiltrated through a dedicated business partner connection to a vendor, who is not held to the same security contral standards.

Which of the following is the MOST likely source of the breach?
A . Side channel
B. Supply chain
C. Cryptographic downgrade
D. Malware

View Answer

Answer: B

Explanation:

A supply chain attack occurs when a third-party supplier or business partner is compromised, leading to an attacker gaining unauthorized access to the targeted organization’s network. In this scenario, the dedicated business partner connection to a vendor was used to exfiltrate customer credit card data, indicating that the vendor’s network was breached and used as a supply chain attack vector.