CompTIA Security+ SY0-701 Practice Question

The correct answer is False because a self-updating firmware mechanism that does not include a signature validation step is vulnerable to malicious updates. Signature validation is a security best practice to ensure the authenticity and integrity of the firmware update. Without verifying the signature, there is no assurance that the update is from a legitimate source, and the device could be compromised with malware or backdoors through the unvalidated update. While self-updating is a useful feature, without verification of the update's legitimacy, it introduces risks that can be exploited by attackers.