312-50V11 · Question #17
Bob, your senior colleague, has sent you a mail regarding aa deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days, Bob denies that he had ever sent a…
The correct answer is C. Non-Repudiation. Non-repudiation is the security property that prevents a party from denying a previously performed action, such as sending a message.
Question
Bob, your senior colleague, has sent you a mail regarding aa deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days, Bob denies that he had ever sent a mail. What do you want to "know" to prove yourself that it was Bob who had send a mail?
Options
- AConfidentiality
- BIntegrity
- CNon-Repudiation
- DAuthentication
How the community answered
(68 responses)- A3% (2)
- B1% (1)
- C88% (60)
- D7% (5)
Why each option
Non-repudiation is the security property that prevents a party from denying a previously performed action, such as sending a message.
Confidentiality ensures information is accessible only to authorized parties, but provides no proof of who performed a specific action.
Integrity ensures data was not altered in transit, but does not create an undeniable record attributing an action to a specific sender.
Non-repudiation ensures that the originator of a message cannot later deny having sent it, typically enforced through digital signatures bound to the sender's private key. In this scenario, a valid digital signature on Bob's email would cryptographically prove he sent it, since only his private key could produce that signature.
Authentication verifies identity at a point in time but does not produce a persistent, legally binding proof that a specific action was taken.
Concept tested: Non-repudiation via digital signatures
Source: https://csrc.nist.gov/glossary/term/non_repudiation
Topics
Community Discussion
No community discussion yet for this question.