Assessing a Third Party's Risk by Counting Bugs in the Code

question 66

Multiple Choice

Assessing a third party's risk by counting bugs in the code may not be the best measure of an attack surface within the supply chain. Which of the following is LEAST associated with the attack surface?

• A) Input protocols
• B) Target processes
• C) Error messages
• D) Access rights

---

Definitions:

Net Income

The total profit or loss of a company after all revenues, expenses, taxes, and costs have been subtracted from total revenue.

Operating Activities

Business activities directly related to the production, sale, and delivery of a company's products or services, generating the majority of its revenue and expenses.

Cash Dividends

Cash dividends are payments made by a corporation to its shareholders, usually as a distribution of profits.

Free Cash Flow

A measure of financial performance calculated as operating cash flow minus capital expenditures, representing the cash that a company is able to generate after spending the money required to maintain or expand its asset base.