ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
Your development team publishes nightly builds of a CLI tool and a separate text file containing the SHA-256 checksum for each binary. Before installation, users are told to calculate the checksum locally and compare it to the published value. Which security objective is primarily being addressed?
Confidentiality of the binary by ensuring it cannot be read in transit
Integrity of the binary by detecting any unauthorized modification
Non-repudiation by providing verifiable proof of the publisher's identity
Availability of the binary by enabling redundant download sources
A cryptographic hash such as SHA-256 produces a unique, fixed-length digest of the binary. Any bit-level change-whether accidental corruption or malicious tampering-will create a different digest, so comparing the locally calculated value to the one supplied by the publisher detects alteration. This protects the integrity of the software. Hashes alone do not hide the contents (confidentiality), prove who published the file (non-repudiation or authenticity), or make the file more accessible (availability).
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a cryptographic hash function like SHA-256?
Open an interactive chat with Bash
How does checksum verification protect software integrity?
Open an interactive chat with Bash
Why is SHA-256 used instead of simpler checksum methods?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Concepts
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .