nerdexam
Isaca

CISM · Question #298

Which of the following provides nonrepudiation of electronic transactions?

The correct answer is B. Third-party certificates. Third-party certificates provide nonrepudiation by enabling digital signatures backed by a trusted Certificate Authority (CA). When a party signs a transaction using their private key - and that key is tied to a certificate issued and verified by a trusted third party - they…

Submitted by devops_kid· Apr 18, 2026Information Security Program

Question

Which of the following provides nonrepudiation of electronic transactions?

Options

  • ASymmetric algorithms
  • BThird-party certificates
  • CPeriodic reaccreditations
  • DMulti-factor authentication (MFA)

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    94% (30)
  • C
    3% (1)

Explanation

Third-party certificates provide nonrepudiation by enabling digital signatures backed by a trusted Certificate Authority (CA). When a party signs a transaction using their private key - and that key is tied to a certificate issued and verified by a trusted third party - they cannot later credibly deny having signed it, because only they possess that private key and the CA has verified their identity. The third-party CA's involvement creates an auditable chain of trust. Symmetric algorithms (A) do not provide nonrepudiation because both parties share the same key, so either could have generated the message. Periodic reaccreditation (C) is a system authorization process. MFA (D) strengthens authentication but does not bind a specific signed artifact to a verified identity in a way that prevents denial - it proves who logged in, not who signed a specific transaction.

Topics

#Nonrepudiation#Digital Certificates#Public Key Infrastructure#Cryptography

Community Discussion

No community discussion yet for this question.

Full CISM Practice