ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
During a security review, developers must guarantee that critical release binaries downloaded by clients have not been altered and truly originate from the vendor. Which control best meets both requirements without hiding the code's contents?
Encrypt the binaries with AES-256 before distribution
Apply a digital signature to each distributed binary
Compress the binaries and attach a simple checksum file
Host the binaries on a geographically redundant content-delivery network
Digitally signing the binaries generates a cryptographic hash that is encrypted with the vendor's private key. Anyone can later use the corresponding public key to verify that the hash still matches the file (detecting any unauthorized modification) and that the signer possessed the private key (proving authenticity). AES-256 encryption focuses on confidentiality and, unless an authenticated mode is chosen, does not inherently prove origin. A redundant CDN improves availability, not integrity. Compressing with a checksum can detect simple corruption but does not confirm the source and is easier to forge than a digital signature.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a digital signature and how does it work in software distribution?
Open an interactive chat with Bash
How does a cryptographic hash ensure integrity?
Open an interactive chat with Bash
Why not use AES-256 encryption for ensuring file authenticity?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Concepts
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .