Choose two true statements regarding signed IPS packages.
A.
A signature takes the form of an action statement in a manifest.
B.
A package can be signed before adding it to a repository.
C.
A package manifest may contain more than one signature.
D.
Only one organization can apply signatures to a given package.
Explanation:
A: IPS package manifests can be signed, with the signatures becoming part of the
manifest.
Signatures are represented as actions just as all other manifest content is represented as actions.
C: A manifest can have multiple independent signatures.
A C
https://docs.oracle.com/cd/E36784_01/html/E36856/glyed.html#scrolltoc