How is nonrepudiation supported within a public key infrastructure (PKI) environment?

The correct answer is C. Through the use of a certificate issued by a certificate authority (CA). Nonrepudiation means a sender cannot deny having sent a message. In a PKI environment, this is achieved through digital signatures: the sender signs data using their private key, and the recipient verifies the signature using the sender's public key. The CA-issued certificate…

Submitted by satoshi_tk· Apr 18, 2026Protection of Information Assets

Question

Options

AThrough the use of private keys to decrypt data received by a user
BThrough the use of enterprise key management systems
CThrough the use of a certificate issued by a certificate authority (CA)
DThrough the use of elliptical curve cryptography on transmitted messages

How the community answered

(27 responses)

B
4% (1)
C
93% (25)
D
4% (1)

Explanation

Nonrepudiation means a sender cannot deny having sent a message. In a PKI environment, this is achieved through digital signatures: the sender signs data using their private key, and the recipient verifies the signature using the sender's public key. The CA-issued certificate binds the public key to the sender's verified identity, making it impossible to credibly deny authorship. Using a private key to decrypt data (A) supports confidentiality, not nonrepudiation. Enterprise key management (B) is an operational control. Elliptical curve cryptography (D) is an algorithm type that can be used in signing but is not itself the mechanism for nonrepudiation - the certificate-based identity binding is.

Topics

#PKI#Nonrepudiation#Digital Certificates#Certificate Authority

Community Discussion

No community discussion yet for this question.

Full CISA Practice