Why use a vendor hash for an installer file?

SY0-701 By islever Editorial Last updated

Short answer

A To test the integrity of the file

Question

For which of the following reasons would a systems administrator leverage a 3DES hash from an installer file that is posted on a vendor’s website?
  1. To test the integrity of the file Correct Answer
  2. To validate the authenticity of the file
  3. To activate the license for the file
  4. To calculate the checksum of the file

Key Takeaways

This question tests the security objective of integrity versus authenticity, requiring the distinction between verifying a file hasn't changed (hash) and verifying the source (digital signature).

A systems administrator uses a vendor-provided hash to verify the integrity of a downloaded installer. This ensures the file has not been altered or corrupted during transmission.

Common mistake: Selecting 'To validate the authenticity of the file' is a common error because hashes only prove integrity (that the file hasn't changed), not the identity of the sender.

Expert Analysis

Why the Answer Is Correct

The correct answer is A because the primary purpose of a cryptographic hash provided by a vendor is to verify the integrity of the file. By generating a hash of the downloaded file and comparing it to the vendor's posted hash, an administrator confirms that the file has not been modified, corrupted, or tampered with during transit. This aligns with the integrity principle of the CIA triad.

Why the Other Options Are Wrong

Option B is incorrect because a hash alone cannot validate authenticity; it cannot prove the file came from the specific vendor, only that the file matches the posted value. Option C is incorrect as hashing is not a mechanism for license activation. Option D describes the method (calculating the checksum) rather than the administrative reason (testing integrity).

Community Comment Notes

Community members noted the terminology inaccuracy in the question, pointing out that 3DES is an encryption algorithm, not a hashing algorithm. Despite this, the consensus confirms that the question refers to using a cryptographic hash value to ensure the file content remains intact and unaltered.

Official Reference

https://csrc.nist.gov/projects/hash-functions

This link opens the official vendor documentation in a new tab.

Exam Strategy

Focus on the CIA triad: Hashing ensures Integrity, while Digital Signatures ensure Authenticity.

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. Fourgehan 👍 4 Answered A
    A 3DES hash (or more accurately, a cryptographic hash such as MD5, SHA-1, or SHA-256) provided by the vendor is used to verify that the downloaded file has not been altered or corrupted during the download process. Integrity: The hash ensures the file's content is intact. When you calculate the hash of the downloaded file and compare it to the one provided by the vendor, matching values indicate the file has not been tampered with or corrupted
  2. 9149f41 👍 2 Answered A
    3DES (Triple DES) stands for Triple Data Encryption Standard It's an encryption algorithm that: Takes the original DES (Data Encryption Standard) algorithm Applies it three times to each data block Uses three different keys in sequence: Encrypt with Key 1 Decrypt with Key 2 Encrypt with Key 3 Key characteristics: Block size: 64 bits Key size: 168 bits (three 56-bit keys) More secure than single DES Slower than newer algorithms like AES Still used in some legacy systems While 3DES is more secure than single DES, it's generally considered obsolete for new applications, with AES (Advanced Encryption Standard) being the preferred modern encryption standard. 3DES (Triple DES) is actually an encryption algorithm, not a hashing algorithm.
  3. 0ca8ee9 👍 1 Answered A
    A systems administrator would leverage a 3DES hash from an installer file posted on a vendor's website primarily to verify the integrity of the file.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide