1. Home
2. All questions
3. Question 492

CISSP study material · question 492 of 500

Which two build pipeline measures does OWASP name as integrity controls under its 2025 integrity failures entry? Choose two.

• Software security

1. A review process for code and configuration changes, to reduce the chance of malicious changes entering the pipeline.
2. Segregation, configuration and access control within the pipeline, so the integrity of code flowing through build and deploy is preserved.
3. Requiring every commit to be signed by a hardware token before merge.
4. Blocking outbound network access from build agents to any external host.

Challenge yourself on this topic → Study as cards