CAS-003 · Question #438
A software company is releasing a new mobile application to a broad set of external customers. Because the software company is rapidly releasing new features, it has built in an over-the-air…
The correct answer is A. Validate cryptographic signatures applied to software updates B. Perform certificate pinning of the associated code signing key. Protecting the integrity of a software update process requires ensuring that (1) the update is authentic and unmodified, and (2) the delivery channel cannot be spoofed. Answer A (validate cryptographic signatures on updates) ensures each update package was signed by the…
Question
A software company is releasing a new mobile application to a broad set of external customers. Because the software company is rapidly releasing new features, it has built in an over-the-air software update process that can automatically update the application at launch time. Which of the following security controls should be recommended by the company's security architect to protect the integrity of the update process? (Choose two.)
Options
- AValidate cryptographic signatures applied to software updates
- BPerform certificate pinning of the associated code signing key
- CRequire HTTPS connections for downloads of software updates
- DEnsure there are multiple download mirrors for availability
- EEnforce a click-through process with user opt-in for new features
How the community answered
(33 responses)- A76% (25)
- C9% (3)
- D3% (1)
- E12% (4)
Explanation
Protecting the integrity of a software update process requires ensuring that (1) the update is authentic and unmodified, and (2) the delivery channel cannot be spoofed. Answer A (validate cryptographic signatures on updates) ensures each update package was signed by the legitimate publisher - any tampered update will have an invalid signature and be rejected. Answer B (certificate pinning of the code signing key) ensures the mobile app only trusts updates signed by a specific pinned certificate, preventing attackers from substituting a fraudulent certificate during delivery (MITM attacks). HTTPS (C) provides confidentiality and server authentication for the download but does not validate the update's content integrity independently. Multiple mirrors (D) address availability, not integrity. User opt-in (E) is a UX control, not a security integrity control.
Topics
Community Discussion
No community discussion yet for this question.