Certified Incident Handler (CIH) Practice Ecam

Which practice assists incident responders in eradicating attacks due to vulnerable and outdated components?

1. Prefer signed packages to reduce the possibility of malicious code being incorporated

2. Ignore version updates

3. Utilize deprecated functions and libraries

4. Employ open-source components without checks

The correct answer is: Prefer signed packages to reduce the possibility of malicious code being incorporated

The practice of preferring signed packages significantly aids incident responders in eradicating attacks related to vulnerable and outdated components. Signed packages are verified for authenticity and integrity, ensuring that they have not been tampered with and are from a trusted source. This verification process mitigates the risk of introducing malicious code that could exploit vulnerabilities in outdated components. When organizations prioritize signed packages, they increase their security posture by relying on tested and secure versions of software rather than potentially harmful or outdated alternatives. This approach helps maintain a lean and secure component inventory, ensuring that only up-to-date and safe versions are utilized in the system, thereby reducing the attack surface. The other options compromise security practices: ignoring version updates neglects essential patches that could protect against vulnerabilities, utilizing deprecated functions and libraries increases exposure to known issues, and employing open-source components without checks can lead to integrating potentially insecure components.