フリー問題

問題文

Before a component is embedded, the receiving team must confirm from the vendor's published key that the file is the one the vendor produced and that its content matches the digest the vendor published. Which practice is that?

選択肢

1. The authentication step is pipeline gating records for this component.
2. The authentication step is provenance verification controls for this component.
3. The authentication step is platform anchoring rules for this component.
4. The authentication step is artifact verification requirements for this component.