A company enlists a trusted agent to implement a way to authenticate email senders positively. Which of the following is the BEST method for the company to prove Vie authenticity of the message?

The correct answer is A. issue PlN-enabled hardware tokens. PIN-enabled hardware tokens store private keys that users employ to digitally sign emails (via S/MIME). The PIN ensures only the authorized owner can activate the token. When a recipient receives the signed email, they verify the signature using the sender's public certificate…

Technical Integration of Enterprise Security

Question

Options

Aissue PlN-enabled hardware tokens
BCreate a CA win all users
CConfigure the server to encrypt all messages in transit
Dinclude a hash in the body of the message

How the community answered

(30 responses)

A
77% (23)
B
7% (2)
C
13% (4)
D
3% (1)

Explanation

PIN-enabled hardware tokens store private keys that users employ to digitally sign emails (via S/MIME). The PIN ensures only the authorized owner can activate the token. When a recipient receives the signed email, they verify the signature using the sender's public certificate, providing cryptographic proof of the sender's identity - i.e., positive authentication. Option B (creating a CA) is infrastructure, not a direct authentication mechanism. Option C addresses confidentiality, not sender authenticity. Option D (a plain hash in the body) can be forged since anyone can compute a hash - it does not bind the message to a specific sender.

Topics

#email authentication#hardware tokens#MFA#non-repudiation

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice