Today’s SY0-701 CompTIA Security+ Pop Quiz: It’s not supposed to shake like that

A technician is upgrading a third-party application in their data center. How can the technician be sure they are installing a valid upgrade from the developer?