Which term would you use to verify that the software's distribution is authentic by attaching a digital certificate?

Which term would you use to verify that the software's distribution is authentic by attaching a digital certificate?

• A. Interactive Application Security Testing
• B. Standard Libraries
• C. CI/CD
• D. Code Signing

Answer: (D)

Code signing is the practice of attaching a digital certificate to software so you can verify its origin and that it hasn’t been tampered with. The publisher signs the distribution package with a private key, and the corresponding public certificate is used by others to validate that signature. If the signature checks out, you can trust that the software really came from the stated publisher and that its contents are unchanged since it was signed. The other terms relate to different aspects of development and testing rather than authenticating software distribution: interactive application security testing focuses on finding vulnerabilities, standard libraries are shared code used by programs, and CI/CD covers building, testing, and deploying code in pipelines.