ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
Your DevOps team relies on PowerShell for automated server configuration. To reduce the risk that an attacker modifies deployment scripts stored on a shared file share, which control provides the strongest assurance that only trusted code is executed on the servers?
Enable detailed PowerShell script block logging and alert on suspicious command patterns.
Compress each script into an encrypted ZIP file before copying it to the servers.
Make the script directory read-only for the service account that runs the automation tasks.
Configure an AllSigned execution policy and require every script to be signed with a corporate code-signing certificate.
Requiring that every PowerShell script be digitally signed with a certificate trusted by the organization and enforcing the AllSigned execution policy ensures two things: (1) Windows verifies the publisher's signature before any script is run, and (2) even if a file is altered after signing, the signature validation will fail and execution will be blocked. Script block logging (which is valuable for detection), NTFS read-only permissions, and simply compressing/encrypting files do not offer the same preventive guarantee that the script's origin and integrity are verified at run time.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a PowerShell AllSigned execution policy?
Open an interactive chat with Bash
What is a corporate code-signing certificate?
Open an interactive chat with Bash
Why is script block logging not as effective as enforcing an AllSigned policy?
Open an interactive chat with Bash
What is the AllSigned execution policy in PowerShell?
Open an interactive chat with Bash
What is a code-signing certificate, and how does it work?
Open an interactive chat with Bash
How does digital signature verification in PowerShell prevent script tampering?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Architecture and Design
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .