CISA · Question #241
Which of the following can only be provided by asymmetric encryption?
The correct answer is D. Nonrepudiation. Asymmetric encryption uniquely provides nonrepudiation by allowing a sender to digitally sign data with their private key, cryptographically proving the origin and preventing denial.
Question
Which of the following can only be provided by asymmetric encryption?
Options
- AInformation privacy
- BData availability
- C256-bit key length
- DNonrepudiation
How the community answered
(44 responses)- A2% (1)
- B2% (1)
- C9% (4)
- D86% (38)
Why each option
Asymmetric encryption uniquely provides nonrepudiation by allowing a sender to digitally sign data with their private key, cryptographically proving the origin and preventing denial.
Information privacy (confidentiality) can be provided by both symmetric and asymmetric encryption through encryption of data.
Data availability is not directly a function of encryption; encryption secures data but doesn't inherently guarantee its presence or accessibility.
256-bit key length is a measure of key strength and can be used with both symmetric (e.g., AES-256) and asymmetric (e.g., elliptic curve cryptography often has equivalent strengths) encryption algorithms.
Asymmetric encryption uses a public/private key pair where only the private key can create a digital signature that can be verified by the corresponding public key, thereby providing cryptographic proof of the sender's identity and preventing them from denying having sent a message (nonrepudiation). Symmetric encryption cannot offer nonrepudiation because both sender and receiver share the same secret key, making it impossible to definitively prove who generated a message.
Concept tested: Asymmetric encryption benefits and nonrepudiation
Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/asymmetric-key-encryption
Topics
Community Discussion
No community discussion yet for this question.