nerdexam
(ISC)2

CISSP · Question #1251

Which of the following BEST ensures the integrity of transactions to intended recipients?

The correct answer is A. Public key infrastructure (PKI). PKI best ensures transaction integrity to intended recipients by using digital certificates and asymmetric cryptography to verify identities and authenticate parties. It provides a scalable, trusted framework for securing communications.

Submitted by haru.x· Mar 5, 2026Security Architecture and Engineering

Question

Which of the following BEST ensures the integrity of transactions to intended recipients?

Options

  • APublic key infrastructure (PKI)
  • BBlockchain technology
  • CPre-shared key (PSK)
  • DWeb of trust

How the community answered

(40 responses)
  • A
    70% (28)
  • B
    5% (2)
  • C
    8% (3)
  • D
    18% (7)

Why each option

PKI best ensures transaction integrity to intended recipients by using digital certificates and asymmetric cryptography to verify identities and authenticate parties. It provides a scalable, trusted framework for securing communications.

APublic key infrastructure (PKI)Correct

PKI uses a hierarchy of Certificate Authorities (CAs) to issue digital certificates that bind public keys to verified identities, ensuring that transactions are encrypted for and authenticated by the intended recipient. Digital signatures generated via PKI provide both integrity verification (detecting tampering) and non-repudiation, confirming the transaction originated from the claimed sender. This makes PKI the most comprehensive and widely adopted solution for ensuring transaction integrity to intended recipients.

BBlockchain technology

Blockchain technology ensures immutability and distributed record-keeping but is primarily a ledger/consensus mechanism rather than a direct cryptographic framework for verifying the identity of specific intended recipients in general transactions.

CPre-shared key (PSK)

Pre-shared keys (PSK) rely on a symmetric secret shared between parties in advance, which does not scale well and lacks the certificate-based identity verification needed to confirm transactions are reaching the intended recipient.

DWeb of trust

Web of trust is a decentralized model used in PGP where users vouch for each other's keys, but it lacks the structured, hierarchical authority and broad interoperability of PKI, making it less reliable for ensuring integrity to intended recipients at scale.

Concept tested: PKI digital certificates ensuring transaction integrity

Source: https://learn.microsoft.com/en-us/windows/win32/seccertenroll/public-key-infrastructure

Topics

#PKI#digital signatures#transaction integrity#non-repudiation

Community Discussion

No community discussion yet for this question.

Full CISSP Practice