Quiz — Supply Chain Failures
10 APPLY on A03: deps, SBOM/pins, inventory, demo http://192.168.0.1/ ethics.
Software Supply Chain Failures — Module Quiz
Ten APPLY items on OWASP Top 10:2025 A03: dependencies as attack surface, direct vs transitive, SBOM and pinning, trust boundaries, compromise story beats without malware samples, inventory labs on projects you own, $HOME/cyberlium-lab notes chmod 600.
APPLY: Why are dependencies A03 attack surface?
APPLY: True or False: Transitive dependencies cannot introduce supply-chain risk.
APPLY: What does an SBOM help you do after a CVE drops?
APPLY: Pinning vs floating latest — which reduces surprise malicious publishes between builds?
APPLY: True or False: Publishing a typosquat package is acceptable Cyberlium homework to “feel A03.”
APPLY: A trusted package version looks malicious. First defender moves?
APPLY: Name a trust boundary in the supply chain.
APPLY: curl http://192.168.0.1/ shows a TP-Link/Netgear “Router Admin” login. What do you do?
APPLY: True or False: Pasting employer registry tokens into public notes proves you did the lab.
APPLY: You finish A03. What opens next?