QUESTION: 233

A developer wants to maintain integrity to each module of a program and ensure controls are in place to detect unauthorized code modification.
Which of the following would be BEST for the developer to perform? (Choose two.)

Utilize code signing by a trusted third party.
Implement certificate-based authentication.
Verify MD5 hashes.
Compress the program with a password.
Encrypt with 3DES.
Make the DACL read-only.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 234

A security solution uses a sandbox environment to execute zero-day software and collect indicators of compromise.
Which of the following should the organization do to BEST take advantage of this solution?

Develop an Nmap plug-in to detect the indicator of compromise.
Update the organization's group policy.
Include the signature in the vulnerability scanning tool.
Deliver an updated threat signature throughout the EDR system.

Answer(s): D

Reveal Solution Next Question

QUESTION: 235

A company wants to implement a new website that will be accessible via browsers with no mobile applications available. The new website will allow customers to submit sensitive medical information securely and receive online medical advice. The company already has multiple other websites where it provides various public health data and information. The new website must implement the following:
• The highest form of web identity validation
• Encryption of all web transactions
• The strongest encryption in-transit
• Logical separation based on data sensitivity
Other things that should be considered include:
• The company operates multiple other websites that use encryption.
• The company wants to minimize total expenditure.
• The company wants to minimize complexity.
Which of the following should the company implement on its new website? (Choose two.)