ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A hash allows the device to detect any change to the firmware, providing integrity. It does not prove who created the file. To show the code comes from the authorized source, the organization must add authenticity, typically by applying a digital signature with the organization's private key and validating it with the corresponding public key. Encrypting the file would supply confidentiality, redundant distribution addresses availability, and audit logging supports non-repudiation, but none of these alone prove origin. Only authenticity meets the stated requirement.