CAS-005 · Question #501
A company needs to quickly assess whether software deployed across the company's global corporate network contains specific software libraries. Which of the following best enables the company's SOC…
The correct answer is C. Requiring all suppliers and internal developers to implement a thorough SBoM. A Software Bill of Materials (SBoM) provides an inventory of all libraries and components in deployed software. Maintaining SBoMs allows the SOC to quickly identify affected systems when a vulnerable library is discovered, enabling a rapid and accurate response.
Question
A company needs to quickly assess whether software deployed across the company's global corporate network contains specific software libraries. Which of the following best enables the company's SOC to respond quickly when such an assessment is required?
Options
- AMaintaining SAST/DAST reports on a server with access restricted to SOC staff
- BContractually requiring all software vendors to attest to third-party risk mitigations
- CRequiring all suppliers and internal developers to implement a thorough SBoM
- DImplementing a GRC tool to maintain a list of all software vendors and internal developers
How the community answered
(48 responses)- A2% (1)
- B6% (3)
- C81% (39)
- D10% (5)
Explanation
A Software Bill of Materials (SBoM) provides an inventory of all libraries and components in deployed software. Maintaining SBoMs allows the SOC to quickly identify affected systems when a vulnerable library is discovered, enabling a rapid and accurate response.
Community Discussion
No community discussion yet for this question.