SY0-301 · Question #459
A software firm posts patches and updates to a publicly accessible FTP site. The software firm also posts digitally signed checksums of all patches and updates. The firm does this to address:
The correct answer is A. Integrity of downloaded software. A digitally signed checksum (hash) allows users to verify that a downloaded file has not been altered in transit or tampered with by a malicious actor-this is the definition of integrity. If the downloaded file's computed hash matches the signed checksum, the file is intact…
Question
A software firm posts patches and updates to a publicly accessible FTP site. The software firm also posts digitally signed checksums of all patches and updates. The firm does this to address:
Options
- AIntegrity of downloaded software.
- BAvailability of the FTP site.
- CConfidentiality of downloaded software.
- DIntegrity of the server logs.
How the community answered
(23 responses)- A91% (21)
- B4% (1)
- C4% (1)
Explanation
A digitally signed checksum (hash) allows users to verify that a downloaded file has not been altered in transit or tampered with by a malicious actor-this is the definition of integrity. If the downloaded file's computed hash matches the signed checksum, the file is intact. Availability (B) relates to uptime and access, which FTP hosting addresses separately. Confidentiality (C) would require encryption of the files themselves, which FTP and checksums do not provide. Server log integrity (D) is unrelated to checksums posted for patches.
Topics
Community Discussion
No community discussion yet for this question.