The correct answer is Commercial off the shelf products.

Reliance on Commercial off the shelf products increases supply chain risk because these components are developed and maintained by third parties and organizations have limited visibility and control over their code, build processes, and update cycles. Vulnerabilities or malicious changes in a widely used commercial component can propagate rapidly across many consumers of that product, and managing provenance, patching, and dependency chains becomes critical when you depend on prebuilt parts.

Notable incidents that exploited trusted third party components demonstrate why dependence on Commercial off the shelf products raises the priority of supply chain risk management for both private firms and public agencies.

Overseas sourced components is not the best choice because the geographic origin of parts does not by itself capture the fundamental issue. The question is about dependence on prebuilt commercial components and that risk exists regardless of where a component was manufactured.

Tightly integrated end to end systems can increase complexity and create risks related to interoperability and single points of failure. However that option does not address the specific reason supply chain risk has grown as organizations adopt prebuilt commercial components.

Contracts for services affect how risk is allocated and managed between parties but they do not explain why supply chain risk has become more important as reliance on prebuilt commercial products has increased.

Full AWS Practitioner Certification Question