Which of the following can be used to safely assess the file?

A security analyst was called to investigate a file received directly from a hardware manufacturer. The analyst is trying to determine whether odified in transit before installation on the user’s computer.

Which of the following can be used to safely assess the file?
A . Check the hash of the installation file
B. Match the file names
C. Verify the URL download location
D. Verify the code-signing certificate

View Answer

Answer: A

Explanation:

The hardware manufacturer will post the hash of the file publicly, and anyone who receives a copy of that file will be able to run a checksum on the file themselves, and compare them to the official manufacturer-provided checksum. Hashing is almost always the correct answer in these type of questions. You’ll see a lot of Github repositories using hashed checksums as well for verification, and I recently just installed Java onto my new computer. Java provided me with a hashed checksum for the setup executable.