CISA · Question #124
Which of the following BEST describes a digital signature?
The correct answer is D. It is unique to the sender using it. A digital signature provides assurance of the sender's identity and message integrity, primarily by being unique to the sender who applies it using their private key.
Question
Which of the following BEST describes a digital signature?
Options
- AIt dynamically validates modifications of data.
- BIt is under control of the receiver.
- CIt is capable of authorization.
- DIt is unique to the sender using it.
How the community answered
(31 responses)- A6% (2)
- B3% (1)
- C3% (1)
- D87% (27)
Why each option
A digital signature provides assurance of the sender's identity and message integrity, primarily by being unique to the sender who applies it using their private key.
A digital signature helps detect if data has been modified after the signature was applied by indicating integrity compromise, but it does not dynamically validate modifications in real-time or prevent them.
While the receiver uses the sender's public key to verify the signature, the creation and control of the digital signature itself (via the private key) remain with the sender.
Digital signatures primarily provide authenticity, integrity, and non-repudiation; while they can be used as a component in authorization systems, their inherent function is not authorization itself.
A digital signature is generated using a sender's private key, which is unique to that sender and is cryptographically linked to their public key. This unique association allows recipients to verify the sender's identity (non-repudiation) and confirm that the message originated from that specific individual or entity, as only the sender possesses their private key.
Concept tested: Digital signature properties and non-repudiation
Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/digital-signatures
Topics
Community Discussion
No community discussion yet for this question.