CAS-001 · Question #43
An employee of a company files a complaint with a security administrator. While sniffing network traffic, the employee discovers that financially confidential emails were passing between two…
The correct answer is A. Transport encryption C. Digital signature. Two separate security objectives must be met. First, non-repudiation - Digital Signatures (C) cryptographically bind a message to its sender using their private key; if a message is signed, the sender cannot deny sending it, directly countering the users' denial. Second…
Question
An employee of a company files a complaint with a security administrator. While sniffing network traffic, the employee discovers that financially confidential emails were passing between two warehouse users. The two users deny sending confidential emails to each other. Which of the following security practices would allow for non-repudiation and prevent network sniffers from reading the confidential mail? (Select TWO).
Options
- ATransport encryption
- BAuthentication hashing
- CDigital signature
- DLegal mail hold
- ETSIG code signing
How the community answered
(22 responses)- A77% (17)
- B5% (1)
- D5% (1)
- E14% (3)
Explanation
Two separate security objectives must be met. First, non-repudiation - Digital Signatures (C) cryptographically bind a message to its sender using their private key; if a message is signed, the sender cannot deny sending it, directly countering the users' denial. Second, preventing sniffing - Transport Encryption (A) (e.g., TLS/S/MIME) scrambles the email content in transit so a network sniffer cannot read it. Authentication hashing (B) verifies integrity but not sender identity for non-repudiation. Legal mail hold (D) is a compliance/litigation concept. TSIG (E) is for DNS zone transfer authentication, not email.
Topics
Community Discussion
No community discussion yet for this question.