A Software Company Is Releasing a New Mobile Application to a Broad

question 25

Multiple Choice

A software company is releasing a new mobile application to a broad set of external customers. Because the software company is rapidly releasing new features, it has built in an over-the-air software update process that can automatically update the application at launch time. Which of the following security controls should be recommended by the company's security architect to protect the integrity of the update process? (Choose two.)

• A) Validate cryptographic signatures applied to software updates
• B) Perform certificate pinning of the associated code signing key
• C) Require HTTPS connections for downloads of software updates
• D) Ensure there are multiple download mirrors for availability
• E) Enforce a click-through process with user opt-in for new features

---

Definitions:

Variance

A statistical measure that represents the dispersion or spread of a set of numbers, indicating how far each number in the set is from the mean.

Critical Path

The longest sequence of activities in a project plan which must be completed on time for the project to complete on due date.

Variance

A statistical measurement that represents the spread between numbers in a data set, indicating how much the numbers differ from the average value.