An Organization Allows the Use of Open-Source Software as Long

question 798

Multiple Choice

An organization allows the use of open-source software as long as users perform a file integrity check on the executables and verify the file against hashes of known malware. A user downloads the following files from an open-source website: After submitting the hashes to the malware registry, the user is alerted that 2f40 3221 33ad 8f34 1032 1adc 13ef 51a4 matches a known malware signature. The organization has been running all of the above software with no known issues. Which of the following actions should the user take and why?

• A) Download and run the software but notify the organization's cybersecurity office. The malware registry has a false positive since the software has been running without any issues.
• B) Do not run any of the software and notify the organization's cybersecurity office. The open-source website has been compromised, and none of the software can be trusted.
• C) Download and run only webserver_82.exe and opendatabase_44.exe and notify the organization's cybersecurity office. Legacy versions of the software have been compromised.
• D) Do not run webserver_82.exe and notify the organization's cybersecurity office. The software is malware.

---

Definitions:

Production Rate

The speed at which goods are manufactured or produced over a specific period, often measured in units per hour or per day.

Cost-Plus Methods

Pricing strategies where a fixed percentage or set amount is added to the production cost to determine the selling price of a product or service.

Markup

The amount added to the cost of goods to cover overhead and profit when determining the selling price.

Sunk Cost

A sunk cost refers to money that has already been spent and cannot be recovered, often considered when making financial decisions about future investments.