197k views
1 vote
Your developers must digitally sign scripts before they will be trusted to run on corporate computers. What must be in place before a code-signing certificate can be issued?

A. PKI
B. CI/CD
C. OWASP
D. Shimming

1 Answer

2 votes

give me a dollar

A. PKI (Public Key Infrastructure)

Step-by-step explanation:

Before a code-signing certificate can be issued for digitally signing scripts, a Public Key Infrastructure (PKI) needs to be in place. PKI is a framework that manages digital keys and certificates, including issuing, managing, and revoking certificates. Code signing involves using a digital certificate to sign code or scripts, ensuring that the code has not been altered or tampered with since it was signed.

The other options listed (B. CI/CD, C. OWASP, D. Shimming) do not directly relate to the issuance of code-signing certificates in this context:

- B. CI/CD (Continuous Integration/Continuous Deployment) is a software development practice related to automating the building, testing, and deployment of code changes.

- C. OWASP (Open Web Application Security Project) is an organization that focuses on improving the security of software.

- D. Shimming refers to a technique used to intercept API calls and modify their parameters or behavior, often used for compatibility purposes in software.

Therefore, the correct answer is A. PKI.

User Bryan Alger
by
8.2k points