A company is concerned with supply chain compromise of new servers and wants to limit this risk. Which of the following should the company review first?

The correct answer is B. Acquisition process. Reviewing the acquisition process allows the company to vet vendors, enforce secure procurement controls, and verify hardware integrity before servers enter the environment, directly mitigating supply chain compromise risks.

Submitted by lars.no· Mar 6, 2026Security program management and oversight

Question

Options

ASanitization procedure
BAcquisition process
CChange management
DAsset tracking

How the community answered

(63 responses)

A
13% (8)
B
78% (49)
C
6% (4)
D
3% (2)

Explanation

Reviewing the acquisition process allows the company to vet vendors, enforce secure procurement controls, and verify hardware integrity before servers enter the environment, directly mitigating supply chain compromise risks.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice