Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA SY0-701 Exam - Topic 2 Question 13 Discussion

A company wants to verify that the software the company is deploying came from the vendor the company purchased the software from. Which of the following is the best way for the company to confirm this information?
A) Validate the code signature.
B) Execute the code in a sandbox.
C) Search the executable for ASCII strings.
D) Generate a hash of the files.

CompTIA SY0-701 Exam - Topic 2 Question 13 Discussion

Actual exam question for CompTIA's SY0-701 exam
Question #: 13
Topic #: 2
[All SY0-701 Questions]

A company wants to verify that the software the company is deploying came from the vendor the company purchased the software from. Which of the following is the best way for the company to confirm this information?

Show Suggested Answer Hide Answer
Suggested Answer: A

Validating the code signature is the best way to verify software authenticity, as it ensures that the software has not been tampered with and that it comes from a verified source. Code signatures are digital signatures applied by the software vendor, and validating them confirms the software's integrity and origin. Reference: CompTIA Security+ SY0-701 course content and official CompTIA study resources.


by Brunilda at Apr 28, 2024, 12:43 AM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Herschel
10 months ago
C is kinda pointless for this situation, right?
upvoted 0 times
...
Glen
10 months ago
B is useful for testing, but not for verifying the source.
upvoted 0 times
...
Lonny
10 months ago
Wait, can you really trust the signature? Seems risky.
upvoted 0 times
...
Merissa
10 months ago
I think D is also important, hashing can help too!
upvoted 0 times
...
Cherri
11 months ago
Definitely A, validating the code signature is key.
upvoted 0 times
...
Amalia
11 months ago
Generating a hash sounds familiar, but I thought that was more for integrity checks rather than verifying the vendor.
upvoted 0 times
...
Valda
11 months ago
I feel like executing the code in a sandbox could help, but it doesn't directly confirm the source of the software, right?
upvoted 0 times
...
Ivan
11 months ago
I remember practicing a similar question where hashing was involved, but I can't recall if it was specifically for verifying vendor software.
upvoted 0 times
...
Carey
11 months ago
I think validating the code signature is the right approach, but I'm not entirely sure if it's the only method we should consider.
upvoted 0 times
...
Rebecka
11 months ago
I think validating the code signature is the best approach here. That's the most direct way to verify the software came from the vendor you purchased it from.
upvoted 0 times
...
Skye
11 months ago
Generating a hash of the files seems like a solid strategy to me. That would allow you to compare the hash to the vendor's to ensure the software hasn't been tampered with.
upvoted 0 times
...
Josephine
11 months ago
Hmm, I'm not sure about this one. Executing the code in a sandbox could also be a good way to verify the source, but I'm not confident that's the best option.
upvoted 0 times
...
Annmarie
11 months ago
This seems like a straightforward question. I think the best approach is to validate the code signature to confirm the software came from the vendor.
upvoted 0 times
...
Ashanti
12 months ago
I'm a bit confused by this question. Searching for ASCII strings in the executable doesn't seem like it would be the most reliable way to confirm the source.
upvoted 0 times
...
Lorenza
12 months ago
Ah, I think I've got it! The user needs the appropriate permissions to actually run the reports, not just view them. So the answer is likely to configure the SQL database permissions for the role, rather than just the privileges.
upvoted 0 times
...
Felix
12 months ago
Hmm, I'm not entirely sure about this one. I'll need to think through the different factors that can impact service satisfaction to determine the best answer.
upvoted 0 times
...
Mireya
2 years ago
True, hashes verify integrity but not the vendor's source.
upvoted 0 times
...
James
2 years ago
It directly confirms the source and integrity from the vendor.
upvoted 0 times
...
Eric
2 years ago
Why do you think validating the code signature is better?
upvoted 0 times
...
Mireya
2 years ago
I was leaning towards generating a hash of the files.
upvoted 0 times
...
James
2 years ago
I think validating the code signature is the best way.
upvoted 0 times
...
Eric
2 years ago
The question seems interesting but a bit confusing.
upvoted 0 times
...

Save Cancel