312-50V11 · Question #888
Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a mail. W
The correct answer is D. Non-Repudiation. Non-repudiation is the security property that prevents a party from denying a previously performed action, such as sending a message. It is the concept needed to prove Bob sent the email.
Question
Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a mail. What do you want to ""know"" to prove yourself that it was Bob who had send a mail?
Options
- AAuthentication
- BConfidentiality
- CIntegrity
- DNon-Repudiation
How the community answered
(23 responses)- A9% (2)
- B4% (1)
- D87% (20)
Why each option
Non-repudiation is the security property that prevents a party from denying a previously performed action, such as sending a message. It is the concept needed to prove Bob sent the email.
Authentication verifies identity at the time of access or login, but does not provide retrospective proof that a specific action was taken by that identity.
Confidentiality ensures data is not disclosed to unauthorized parties, which is unrelated to proving the origin of a sent message.
Integrity confirms that data was not altered in transit, but does not identify or bind the message to a specific sender.
Non-repudiation ensures that a sender cannot credibly deny having sent a message. Digital signatures achieve this by cryptographically binding the message to the sender's private key, creating verifiable proof of origin. This is the exact scenario described - proving authorship of an already-sent email.
Concept tested: Non-repudiation via digital signatures
Source: https://csrc.nist.gov/glossary/term/non_repudiation
Topics
Community Discussion
No community discussion yet for this question.