🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Your team hosts an open-source project in AWS CodeCommit and accepts encrypted email patches from hundreds of volunteers. Management wants every patch digitally signed to prove authorship and integrity but refuses to deploy or rely on any centralized certificate authority. Contributors are willing to meet in person to exchange and cross-sign keys. Which approach best meets these needs?

  • Use AWS Key Management Service (KMS) customer-managed keys integrated with CodeCommit so contributors can sign their commits.

  • Adopt Pretty Good Privacy (PGP) and let contributors create and exchange keys, signing each other's keys to build a Web of Trust for signature verification.

  • Require all contributors to authenticate through a Kerberos realm federated with AWS Directory Service before submitting signed patches.

  • Deploy an internal hierarchical PKI with a privately managed root CA to issue X.509 code-signing certificates to every contributor.

ISC2 Systems Security Certified Practitioner (SSCP)
Cryptography
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot