The correct answer is Detecting risks establishing contractual safeguards ongoing monitoring incident handling and using data analytics.

This answer describes a holistic supply chain risk management method because it combines proactive and reactive activities. It includes detection of threats and vulnerabilities, the use of contractual safeguards to set expectations and obligations, continuous monitoring to find changes in vendor posture, incident handling to respond when problems occur, and data analytics to identify patterns and prioritize efforts.

Relying solely on internal risk assessments is incorrect because internal assessments are necessary but they miss external supplier risks and they do not provide ongoing monitoring or contractual controls. Relying only on internal reviews is not comprehensive.

Increasing headcount for vendor oversight is incorrect because adding staff can help but it is not a complete strategy. Headcount alone does not ensure contractual protections, continuous monitoring, incident response capabilities, or the use of analytics to scale visibility.

Consolidating all purchases to a single supplier is incorrect because this creates a single point of failure and increases systemic risk. Consolidation does not itself detect risks or provide the layered controls needed for robust supply chain security.

Full AWS Practitioner Certification Question