CompTIA CASP+ Practice Test

What ensures that a script has not been altered by anyone other than the original author?

1. Version control

2. Backup and recovery

3. Code signing

4. Access control

The correct answer is: Code signing

Code signing is the process that ensures a script or software application has not been altered or tampered with by anyone other than the original author. This process uses digital signatures to provide a means of verification that the code is indeed from a legitimate source and hasn't been modified since it was signed. When a developer signs their code, it creates a unique hash and encrypts it with their private key. When the code is executed or distributed, it can be verified using the accompanying public key, confirming the integrity and authenticity of the script. This security measure is particularly important in environments where scripts can be shared or downloaded, as it helps to establish trust in the code’s origin and protect against malicious alterations. It can serve as a safeguard against man-in-the-middle attacks or unauthorized modifications that could introduce vulnerabilities into the script. In contrast, while version control helps manage changes and track the history of code development, it does not inherently verify the integrity of code once it is deployed. Backup and recovery ensure data can be restored in case of loss but do not address code integrity. Access control mechanisms manage who can modify or execute code, but they do not provide a means to verify if the code has been changed after it has been written or signed. Thus, code signing specifically