CAS-005 · Question #19
A security analyst detected unusual network traffic related to program updating processes. The analyst collected artifacts from compromised user workstations. The discovered artifacts were binary…
The correct answer is B. Implementing digital signature. Digital signatures ensure the integrity and authenticity of binaries. If binaries are tampered with or replaced by malicious versions, signature verification will fail. This would prevent malicious files with the same name but different hashes from executing, thereby mitigating…
Question
A security analyst detected unusual network traffic related to program updating processes. The analyst collected artifacts from compromised user workstations. The discovered artifacts were binary files with the same name as existing valid binaries but with different hashes. Which of the following solutions would most likely prevent this situation from reoccurring?
Options
- AImproving patching processes
- BImplementing digital signature
- CPerforming manual updates via USB ports
- DAllowing only dies from internal sources
How the community answered
(23 responses)- A9% (2)
- B83% (19)
- C4% (1)
- D4% (1)
Explanation
Digital signatures ensure the integrity and authenticity of binaries. If binaries are tampered with or replaced by malicious versions, signature verification will fail. This would prevent malicious files with the same name but different hashes from executing, thereby mitigating such attacks.
Community Discussion
No community discussion yet for this question.