SY0-701 Threats, Vulnerabilities, and Mitigations Practice Question
Exhibit
Build pipeline notes: - Package manager updated dependency: "fast-logger" from 2.4.1 to 2.4.2 - New outbound connection at startup: api.fast-logger-support[.]com - No code changes were made by the development team - Security review note: "Dependency source is a recently created public repository account"
Based on the exhibit, which supply-chain threat is most likely?
⚠ Common exam trap
The SY0-701 exam often tests the distinction between supply-chain attacks (compromising a trusted third-party component) and direct attacks on the organization's own systems; the trap here is that candidates may confuse a dependency compromise with a brute-force attack or SQL injection because they all involve unauthorized access, but the key difference is the vector—the dependency is externally sourced and trusted.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Dependency compromise
The exhibit shows a dependency on a third-party library (e.g., a JavaScript package from a CDN or a software component from an external repository). A dependency compromise occurs when an attacker injects malicious code into that trusted third-party component, which is then pulled into the organization's environment during updates or builds. This is the most likely supply-chain threat because it directly exploits the trust placed in external dependencies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Dependency compromise
Why this is correct
The application began contacting an unfamiliar domain immediately after a dependency update, and the package came from a newly created repository account. That strongly suggests dependency compromise, a supply-chain issue where a trusted library has been replaced or altered with malicious behavior.
- ✗
Brute-force attack
Why it's wrong here
A brute-force attack is a method of gaining unauthorized access by systematically trying many passwords, passphrases, or authentication tokens until the correct one is found. The exhibit, however, shows no repeated authentication failures or login attempts; instead, it describes an unexpected outbound connection to a new domain immediately following a dependency update. That behavior is characteristic of a malicious dependency, not of an attack targeting credentials.
- ✗
SQL injection
Why it's wrong here
SQL injection exploits insecure database query construction by injecting malicious SQL statements through user-controlled input, potentially allowing data theft or modification. The exhibit points to a software supply-chain event: after installing an updated package, the application started communicating with an unknown domain. There is no evidence of user input affecting database queries, and the initial access vector is the compromised dependency itself rather than a vulnerable query interface.
- ✗
Privilege escalation
Why it's wrong here
Privilege escalation refers to an attacker gaining elevated rights or permissions beyond their current authorization level, often by exploiting kernel flaws or misconfigured accounts. The exhibit does not indicate any change in user role, access token, or process permissions; rather, it shows a third-party package executing unexpected behavior after an update. The core issue is the integrity of the dependency itself, not an unauthorized increase in privilege.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SY0-701 question from scratch — 1,013 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.