Certified Secure Software Lifecycle Professional (CSSLP) — Question 11

Which of the following is an example of over-the-air (OTA) provisioning in digital rights management?

Answer options

• A. Use of shared secrets to initiate or rebuild trust.
• B. Use of software to meet the deployment goals.
• C. Use of concealment to avoid tampering attacks.
• D. Use of device properties for unique identification.

Correct answer: D, C

Explanation

The correct answer, D, highlights the use of unique device properties which are essential for OTA provisioning in digital rights management. Options A, B, and C do not specifically relate to OTA provisioning; instead, they focus on trust establishment, deployment strategies, and security against tampering, which are not examples of OTA provisioning.