Which of the following are the common security problems involved in communications and email? Each correct answer represents a complete solution. Choose all that apply.

Question

Options

• AMessage replay
• BIdentity theft
• CMessage modification
• DMessage digest
• EMessage repudiation
• FEavesdropping
• GFalse message

• A
  92% (57)
• D
  8% (5)

Explanation

All six correct options (A, B, C, E, F, G) represent threats or attacks against the confidentiality, integrity, authenticity, or accountability of communications: eavesdropping (F) and identity theft (B) target who sees or sends a message; message modification (C) and false messages (G) undermine integrity; message replay (A) exploits captured valid messages to repeat actions fraudulently; and message repudiation (E) occurs when a sender falsely denies having sent a message.

Option D (Message digest) is the distractor - it is not a threat but a security control. A message digest (e.g., SHA-256) is a cryptographic hash used to detect tampering, making it a countermeasure against problems like message modification, not a problem itself.

Memory tip: Ask yourself, "Is this something an attacker does TO you, or something you use TO protect yourself?" Everything on the correct list is something bad that happens to your communication; a message digest is a tool you use to defend against those bad things. If it sounds like a defense mechanism, it's not the problem - it's the solution.

No community discussion yet for this question.