The correct answer is B. Code signing.
Code signing uses a digital signature to verify the authenticity and integrity of software, scripts, drivers, or compiled binaries. If a compiled binary is signed, the production environment can verify that the binary came from a trusted source and has not been modified since it was signed.
This supports integrity because any unauthorized change to the binary would invalidate the signature.
Why the other options are incorrect:
A. Input validation
Input validation helps prevent attacks such as injection, cross-site scripting, and malformed input attacks. It does not verify the integrity of compiled binaries.
C. SQL injection
SQL injection is an attack technique, not a security measure.
D. Static analysis
Static analysis reviews source code or binaries without executing them. It can help identify vulnerabilities before deployment, but it does not provide ongoing integrity verification of compiled binaries in production.
Therefore, the best answer is code signing.
