StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Server client IoT and OT security

Practice question 285 of 498 · medium

An IoT update download is completed over an encrypted channel. Which check still establishes the content’s intended authenticity and integrity?

Choose the single best answer.

  1. A.Verify only the TLS certificate of the download endpoint
  2. B.Accept every binary because the connection used TLS
  3. C.Validate the signed manifest and its trusted binary hashes
  4. D.Match a published hash obtained from the same unauthenticated download location
Show the answer and explanation

✓ Correct answer

  • Validate the signed manifest and its trusted binary hashes

A trusted signed manifest authenticates the expected hashes, which the agent then compares with downloaded binaries. A hash from the same unauthenticated location could be replaced with the malicious binary. TLS certificate verification secures the connection but does not by itself authorize the intended firmware content.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.