nerdexam
Isaca

CISA · Question #32

Which of the following is the PRIMARY reason for using a digital signature?

The correct answer is A. Authenticate the sender of a message. A digital signature primarily serves to authenticate the sender of a message, providing assurance of the sender's identity. It also ensures the integrity of the message and provides non-repudiation, meaning the sender cannot deny having sent it.

Submitted by anjalisingh· Apr 18, 2026Protection of Information Assets

Question

Which of the following is the PRIMARY reason for using a digital signature?

Options

  • AAuthenticate the sender of a message
  • BProvide confidentiality to the transmission
  • CVerify the integrity of the data and the identity of the recipient
  • DProvide availability to the transmission

How the community answered

(37 responses)
  • A
    86% (32)
  • B
    3% (1)
  • C
    8% (3)
  • D
    3% (1)

Why each option

A digital signature primarily serves to authenticate the sender of a message, providing assurance of the sender's identity. It also ensures the integrity of the message and provides non-repudiation, meaning the sender cannot deny having sent it.

AAuthenticate the sender of a messageCorrect

A digital signature uses the sender's private key to encrypt a hash of the message, which can then be decrypted by anyone with the sender's public key, proving that the sender indeed originated the message. This process establishes both sender authenticity and message integrity, as any alteration to the message would result in a different hash.

BProvide confidentiality to the transmission

Digital signatures do not provide confidentiality; that is typically achieved through encryption using symmetric or asymmetric keys for the entire message content.

CVerify the integrity of the data and the identity of the recipient

While digital signatures verify data integrity, they authenticate the sender, not the recipient; recipient identity verification is a separate process.

DProvide availability to the transmission

Digital signatures have no direct role in providing availability to a transmission; availability relates to the system's ability to remain accessible and operational.

Concept tested: Digital signature purpose (authentication, integrity, non-repudiation)

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-how-digital-signatures-work

Topics

#Digital Signatures#Authentication#Non-repudiation#Cryptography

Community Discussion

No community discussion yet for this question.

Full CISA Practice