CompTIA CASP+ (CAS-004) — Question 268

A new requirement for legislators has forced a government security team to develop a validation process to verify the integrity of a downloaded file and the sender of the file. Which of the following is the BEST way for the security team to comply with this requirement?

Answer options

• A. Digital signature
• B. Message hash
• C. Message digest
• D. Message authentication code

Correct answer: A

Explanation

A digital signature is the most effective method to verify both the integrity of the file and the identity of the sender, as it uses cryptographic techniques to provide authentication and non-repudiation. The other options, such as message hash and message digest, primarily ensure data integrity but do not authenticate the sender. A message authentication code can verify the sender but does not provide non-repudiation like a digital signature does.