What does SBOM enable regarding license compliance?

• A. To generate a user interface for dependencies.
• B. To list components and licenses for risk assessment and supply chain transparency.
• C. To compile a list of all developers.
• D. To obfuscate license information.

Answer: (B)

An SBOM provides a formal inventory of software components and their licenses, which is essential for license compliance. By listing every library or module included in a product and the license terms that govern each one, you can identify obligations, conflicts, and potential non-compliance risks before they become problems. This also supports supply chain transparency, since you can trace each component back to its origin and licensing terms.

With this visibility, you can ensure you meet attribution and distribution requirements, manage copyleft obligations, and avoid combining components with incompatible licenses. The other choices miss the core purpose: a user interface for dependencies isn’t the primary function of an SBOM, listing developers isn’t about license compliance, and obfuscating license information would defeat the goal of transparency and legal protection.