CAS-002 · Question #672
A certain script was recently altered by the author to meet certain security requirements, and needs to be executed on several critical servers. Which of the following describes the process of…
The correct answer is D. Code signing. Code signing is the specific security process that cryptographically binds a developer's identity to an executable or script, allowing recipients to verify both authenticity and integrity before execution.
Question
A certain script was recently altered by the author to meet certain security requirements, and needs to be executed on several critical servers. Which of the following describes the process of ensuring that the script being used was not altered by anyone other than the author?
Options
- ADigital encryption
- BDigital signing
- CPassword entropy
- DCode signing
How the community answered
(35 responses)- A6% (2)
- B3% (1)
- D91% (32)
Why each option
Code signing is the specific security process that cryptographically binds a developer's identity to an executable or script, allowing recipients to verify both authenticity and integrity before execution.
Digital encryption protects the confidentiality of data by making it unreadable to unauthorized parties, but it does not establish authorship or detect post-signing modifications.
Digital signing is a broad cryptographic concept encompassing signatures on many data types; code signing is the precise term for applying this process specifically to software, scripts, and executables.
Password entropy measures the randomness and unpredictability of a password to resist brute-force attacks and has no relevance to verifying the integrity or origin of a script.
Code signing applies a cryptographic digital signature to scripts or executables using the author's private key, so any server executing the script can verify the signature with the corresponding public key or certificate. If the script was modified by anyone other than the author after signing, the signature verification will fail, immediately detecting tampering. This is the industry-standard process for ensuring that code distributed to multiple critical servers was not altered between the developer's workstation and execution.
Concept tested: Code signing for script integrity and author verification
Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/code-signing-best-practices
Topics
Community Discussion
No community discussion yet for this question.