ISP Supply Chain Security & Vendor Management

Question 1

Which of the following BEST describes the primary goal of supply chain security in an industrial environment?

Accepted Answer

Ensuring integrity, authenticity, and continuity of goods and services throughout the supply chain

Answer

Reducing procurement costs through vendor consolidation

Answer

Automating vendor contract negotiations

Answer

Limiting the number of approved suppliers to two or fewer

Question 2

A company discovers that a critical component supplier has been acquired by a foreign entity with potential ties to a nation-state adversary. What is the MOST appropriate immediate action?

Accepted Answer

Conduct a supply chain risk assessment and consider alternative suppliers

Answer

Continue business as usual until the next contract renewal

Answer

Immediately terminate the contract without further review

Answer

Report the acquisition to the media

Question 3

Which federal regulation requires contractors handling classified information to implement supply chain risk management (SCRM) practices?

Accepted Answer

NISPOM (32 CFR Part 117)

Answer

OSHA 1910.119

Answer

HIPAA Security Rule

Answer

SOX Section 404

Question 4

What is a 'counterfeit part' in the context of supply chain security?

Accepted Answer

An item that is a copy, imitation, or substitute that has been misrepresented as genuine

Answer

A part manufactured by an unapproved domestic supplier

Answer

A surplus part sold at a reduced price

Answer

A part that fails quality inspection due to manufacturing defects

Question 5

Which of the following is an example of a SECOND-TIER supply chain risk?

Accepted Answer

A subcontractor used by your primary vendor experiencing a data breach

Answer

A direct vendor failing to deliver on time

Answer

An internal employee misusing procurement credentials

Answer

A natural disaster affecting your own facility

Question 6

Which practice is MOST effective in verifying the authenticity of hardware components received from a supplier?

Accepted Answer

Testing against known-good baselines and reviewing traceability documentation

Answer

Accepting the supplier's certificate of conformance without inspection

Answer

Visual inspection only by receiving staff

Answer

Storing components in a secure warehouse for 30 days before use

Question 7

What does the term 'vendor lock-in' represent as a supply chain security concern?

Accepted Answer

Excessive dependence on a single vendor that limits an organization's ability to switch suppliers

Answer

A vendor physically securing their facility

Answer

A contractual clause preventing vendors from disclosing pricing

Answer

A security feature that limits vendor system access