Study. uk . com
  1. Home
  2. All questions
  3. Question 487

CISSP study material · question 487 of 500

Which situations does OWASP's 2025 entry on software and data integrity failures describe? Choose three.

  1. Storing user passwords with a fast general-purpose hash function.
  2. Relying on plugins or libraries from untrusted repositories or content networks.
  3. A build pipeline that pulls artifacts from untrusted places without verifying signatures.
  4. Auto-update functionality that applies downloads without sufficient integrity verification.
Show the answer

Answer: C. A build pipeline that pulls artifacts from untrusted places without verifying signatures.
D. Auto-update functionality that applies downloads without sufficient integrity verification.
B. Relying on plugins or libraries from untrusted repositories or content networks.

The category covers code and infrastructure that does not protect against untrusted code or data being treated as valid: untrusted plugins and repositories, unverified pipeline artifacts, and unverified auto-updates.

Source: OWASP Top 10 A08:2025 (OWASP) — OWASP Top 10:2025 A08 Software or Data Integrity Failures > Description

Challenge yourself on this topic → Study as cards