ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
During the automated build of a Windows desktop application, management adds a requirement: customers must be able to confirm that any installer they download originated from your organization and has not been modified in transit, but developers still need to debug post-release issues without difficulty. Which anti-tampering technique should be integrated into the build pipeline to meet this requirement?
Digitally sign the final executable with the organization's code-signing certificate before publishing.
Strip all debugging symbols from the compiled binary to reduce opportunities for reverse engineering.
Compress the executable with a packer such as UPX to make unauthorized changes more difficult.
Apply control-flow and string obfuscation to the source code prior to compilation.
Digitally signing the compiled installer with the organization's private code-signing key appends a cryptographic signature that end-users (and operating systems) can validate with the corresponding public certificate. A successful signature check proves both authenticity (the code came from the claimed publisher) and integrity (the file was not altered after signing). This control does not impede debugging because it leaves symbol information and code structure unchanged. In contrast, control-flow obfuscation focuses on hiding implementation details but offers no standard way for customers to verify provenance or detect tampering. Packing the binary or stripping symbol tables may slightly hinder reverse engineering or reduce size but likewise provides no cryptographic assurance of integrity or authenticity.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a code-signing certificate?
Open an interactive chat with Bash
How does digital signing ensure file integrity?
Open an interactive chat with Bash
Why is debugging not affected by digital signing?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Implementation
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .