029_Malicious Updates – CompTIA Security+ SY0-701 – 2.3

How are many update signatures verified by the system?

• Silently in the background

• Manually by the user

• Through a pop-up notification

• By a third-party application

Why might users not notice digital signature checks?

• They happen automatically

• They are too complex to understand

• They require user intervention

• They are only performed on large files

What should you check to confirm the authenticity of a software update?

• Digital signature

• File size

• Update frequency

• User reviews

What is a security risk of using third-party download sites?

• They may host malicious or fake updates.

• They always provide the latest software versions.

• They are endorsed by major software companies.

• They offer better customer support than official sites.

What made the SolarWinds update appear legitimate?

• It had a colorful interface

• It was digitally signed and followed normal procedures

• It came with a coupon

• It was endorsed by a celebrity

What is a key part of a defense-in-depth strategy?

• Frequent backups

• Single point of failure

• Minimal security layers

• Open network access

What is a risk associated with software updates?

• They may include malicious code

• They always improve performance

• They are guaranteed to fix all bugs

• They require no user intervention

Software that hasn't had the latest security updates applied to it, making it vulnerable to attack

• Unpatched software

• Outdated software

• Secure software

• Malware

What does digital signature verification help ensure?

• The update is from a trusted source

• The update is free of charge

• The update is compatible with all devices

• The update is available in multiple languages

What should you always do before applying software updates?

• Create a system backup

• Delete old files

• Install new hardware

• Ignore previous updates