CompTIA SY0-701 Exam - Topic 1 Question 21 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 21
Topic #: 1

An organization wants to ensure the integrity of compiled binaries in the production environment. Which of the following security measures would best support this objective?

AInput validation

BCode signing

CSQL injection

DStatic analysis

Show Suggested Answer

Suggested Answer: B

To ensure the integrity of compiled binaries in the production environment, the best security measure is code signing. Code signing uses digital signatures to verify the authenticity and integrity of the software, ensuring that the code has not been tampered with or altered after it was signed.

Code signing: Involves signing code with a digital signature to verify its authenticity and integrity, ensuring the compiled binaries have not been altered.

Input validation: Ensures that only properly formatted data enters an application but does not verify the integrity of compiled binaries.

SQL injection: A type of attack, not a security measure.

Static analysis: Analyzes code for vulnerabilities and errors but does not ensure the integrity of compiled binaries in production.

by Peggie at Aug 07, 2024, 07:11 AM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Luis

3 months ago

Surprised that input validation is even an option for this question!

upvoted 0 times

...

Leatha

3 months ago

Static analysis can catch issues, but it’s not the best for integrity.

upvoted 0 times

...

Refugia

3 months ago

Wait, SQL injection? That’s not even relevant here!

upvoted 0 times

...

Gilma

4 months ago

I agree, code signing really helps verify binaries.

upvoted 0 times

...

Elvera

4 months ago

Code signing is definitely the way to go for integrity.

upvoted 0 times

...

Marleen

4 months ago

I feel like I’ve seen questions like this before, and code signing always stood out as a key measure for integrity.

upvoted 0 times

...

Nikita

4 months ago

Input validation seems more related to preventing issues during runtime rather than ensuring the integrity of binaries.

upvoted 0 times

...

Willis

4 months ago

I'm not entirely sure, but I remember something about static analysis being useful for finding vulnerabilities in code before it's compiled.

upvoted 0 times

...

Frank

5 months ago

I think code signing might be the best option here since it ensures that the binaries haven't been tampered with.

upvoted 0 times

...

Francine

5 months ago

Code signing seems like the most logical choice here. That would help verify the authenticity and integrity of the compiled binaries.

upvoted 0 times

...

Paulene

5 months ago

I'm a bit confused by the options. I'll need to review my notes on binary security to make sure I understand the differences between these approaches.

upvoted 0 times

...

Lachelle

5 months ago

Okay, let's see. I think the key here is ensuring the integrity of the compiled binaries, so I'm going to go with code signing.

upvoted 0 times

...

Jaclyn

5 months ago

Hmm, I'm not sure about this one. I'll have to think it through carefully.

upvoted 0 times

...

Cordelia

5 months ago

This looks like a straightforward security question. I'm pretty confident I can figure this out.

upvoted 0 times

...

Josue

5 months ago

Hmm, I'm a bit unsure about this one. The question is asking about a specific SAP solution, but the image doesn't seem to directly mention any SAP products. I'll need to think this through carefully.

upvoted 0 times

...

Tiara

5 months ago

Okay, I've got this. Information Assurance (IA) is the term that describes the measures to protect and support information systems. The other options are more specific or don't cover all the key aspects.

upvoted 0 times

...

Frederica

5 months ago

I feel like "Perpetual" doesn't fit here, but I can't recall why it was such a big topic in our last class.

upvoted 0 times

...

Thurman

1 year ago

Static analysis can definitely help too, but I still think code signing is the best choice.

upvoted 0 times

...

Talia

1 year ago

I heard the guy who wrote this question likes to code in Comic Sans. No wonder he's so confused about security measures.

upvoted 0 times

...

Fletcher

1 year ago

Input validation? What is this, amateur hour? If you want to keep your binaries secure, you need to sign that code like your life depends on it.

upvoted 0 times

...

Kaitlyn

1 year ago

I'm not sure about that. I think D) Static analysis could also be a good option.

upvoted 0 times

...

Michell

1 year ago

I agree with Thurman. Code signing can help ensure the integrity of compiled binaries.

upvoted 0 times

...

Francene

2 years ago

Static analysis? Are we trying to catch bugs or verify integrity? Code signing is the way to go, my friends.

upvoted 0 times

Stevie

1 year ago

Static analysis can help catch bugs, but code signing is what we need to verify integrity in the production environment.

upvoted 0 times

...

Freeman

1 year ago

Code signing is definitely the way to go for ensuring the integrity of compiled binaries.

upvoted 0 times

...

Tanja

2 years ago

SQL injection? Really? I think someone needs to go back to security basics. Code signing is the obvious choice here.

upvoted 0 times

...

Melda

2 years ago

Code signing all the way! That's the only way to ensure those binaries haven't been tampered with. Anything less is just asking for trouble.

upvoted 0 times

Shantell

1 year ago

Input validation is important for preventing malicious input, but it doesn't guarantee the integrity of compiled binaries.

upvoted 0 times

...

Chauncey

1 year ago

SQL injection is a completely different issue, not related to ensuring binary integrity.

upvoted 0 times

...

Carri

1 year ago

SQL injection is a completely different issue and not relevant for ensuring the integrity of compiled binaries.

upvoted 0 times

...

Stephane

1 year ago

Static analysis can also help in detecting any potential vulnerabilities in the code.

upvoted 0 times

...

Aja

1 year ago

Static analysis can also help identify any potential vulnerabilities in the code.

upvoted 0 times

...

Jeff

1 year ago

I agree, code signing is crucial for ensuring the integrity of compiled binaries.

upvoted 0 times

...

Phyliss

1 year ago

I agree, code signing is crucial for ensuring the integrity of binaries.

upvoted 0 times

...

Thurman

2 years ago

I think the best option is B) Code signing.

upvoted 0 times

...