nerdexam
CompTIA

CAS-001 · Question #223

A certain script was recently altered by the author to meet certain security requirements, and needs to be executed on several critical servers. Which of the following describes the process of…

The correct answer is D. Code signing. Code signing uses a cryptographic digital signature applied specifically to executable code or scripts to verify both the author's identity and that the code has not been tampered with.

Enterprise Security

Question

A certain script was recently altered by the author to meet certain security requirements, and needs to be executed on several critical servers. Which of the following describes the process of ensuring that the script being used was not altered by anyone other than the author?

Options

  • ADigital encryption
  • BDigital signing
  • CPassword entropy
  • DCode signing

How the community answered

(19 responses)
  • A
    5% (1)
  • C
    5% (1)
  • D
    89% (17)

Why each option

Code signing uses a cryptographic digital signature applied specifically to executable code or scripts to verify both the author's identity and that the code has not been tampered with.

ADigital encryption

Digital encryption protects the confidentiality of data by making it unreadable to unauthorized parties but does not verify authorship or detect tampering.

BDigital signing

Digital signing is the broader umbrella concept; code signing is the more precise and correct term when the artifact being signed is a script or executable.

CPassword entropy

Password entropy relates to the randomness and strength of passwords and has no relevance to verifying script integrity or authorship.

DCode signingCorrect

Code signing is the specific practice of applying a digital signature to a script or executable so that recipients can verify it was produced by the claimed author and has not been modified since signing. It directly addresses the requirement of ensuring no one other than the author altered the script. Unlike generic digital signing, code signing is the term used specifically in the context of software and scripts distributed to systems.

Concept tested: Code signing for script integrity verification

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/code-signing-best-practices

Topics

#code signing#integrity verification#digital signature

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice