nerdexam
EC-Council

312-50V12 · Question #252

As a cybersecurity consultant for SafePath Corp, you have been tasked with implementing a system for secure email communication. The key requirement is to ensure both confidentiality and non-repudiati

The correct answer is A. Apply asymmetric encryption with RSA and use the private key for signing.. Achieving both confidentiality and non-repudiation in email requires asymmetric encryption where the sender's private key is used for digital signing, proving identity and intent while the recipient's public key handles encryption for confidentiality.

Submitted by lukas.cz· Mar 4, 2026Cryptography

Question

As a cybersecurity consultant for SafePath Corp, you have been tasked with implementing a system for secure email communication. The key requirement is to ensure both confidentiality and non-repudiation. While considering various encryption methods, you are inclined towards using a combination of symmetric and asymmetric cryptography. However, you are unsure which cryptographic technique would best serve the purpose. Which of the following options would you choose to meet these requirements?

Options

  • AApply asymmetric encryption with RSA and use the private key for signing.
  • BUse the Diffie-Hellman protocol for key exchange and encryption.
  • CApply asymmetric encryption with RSA and use the public key for encryption.
  • DUse symmetric encryption with the AES algorithm.

How the community answered

(38 responses)
  • A
    47% (18)
  • B
    5% (2)
  • C
    16% (6)
  • D
    32% (12)

Why each option

Achieving both confidentiality and non-repudiation in email requires asymmetric encryption where the sender's private key is used for digital signing, proving identity and intent while the recipient's public key handles encryption for confidentiality.

AApply asymmetric encryption with RSA and use the private key for signing.Correct

RSA asymmetric encryption satisfies both requirements simultaneously: the sender signs the message with their private key (only they possess it), providing non-repudiation since the signature can be verified by anyone with the public key, while the recipient's public key encrypts the message content to ensure confidentiality. This dual use of asymmetric cryptography is the foundation of secure email protocols like S/MIME and PGP.

BUse the Diffie-Hellman protocol for key exchange and encryption.

Diffie-Hellman is a key exchange protocol used to establish a shared secret over an insecure channel, but it does not provide encryption itself nor does it inherently support digital signatures for non-repudiation.

CApply asymmetric encryption with RSA and use the public key for encryption.

Using only the public key for encryption addresses confidentiality but does not provide non-repudiation, because anyone with access to the recipient's public key could have sent the encrypted message, making the sender's identity unverifiable.

DUse symmetric encryption with the AES algorithm.

Symmetric encryption with AES provides confidentiality but cannot fulfill non-repudiation requirements because the same shared key is held by both parties, meaning either party could have encrypted the message and neither can prove sole authorship.

Concept tested: RSA asymmetric cryptography for confidentiality and non-repudiation

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/cryptographic-keys

Topics

#Cryptography#Confidentiality#Non-repudiation#Digital signatures

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice