CompTIA SecurityX CAS-005 (V5) Practice Question

A comprehensive hardware assurance program employs a defense-in-depth strategy, integrating checks throughout the product life cycle. Implementing authenticity and integrity verification at multiple stages-such as when components are received, after assembly, and even during runtime-provides the most robust protection. A single check at final assembly is insufficient, as it occurs too late to prevent the costly integration of compromised parts. While sourcing from authorized distributors is a critical practice, it should be part of a larger strategy and not the sole method of assurance, as supply chain vulnerabilities can still exist. Relying only on statistical sampling for functional tests is inadequate for detecting targeted malicious modifications like hardware Trojans, which may not affect normal functionality and can be missed by sampling.