CSSLP · Question #375
Which of the following can be used for non-repudiation purposes?
The correct answer is C. Digital signatures. Digital signatures can be used for non-repudiation purposes by proving the authenticity and integrity of a message, preventing the sender from denying its origin.
Question
Which of the following can be used for non-repudiation purposes?
Options
- AHashing
- BSymmetric encryption algorithms
- CDigital signatures
- DData loss prevention (DLP)
How the community answered
(13 responses)- C92% (12)
- D8% (1)
Why each option
Digital signatures can be used for non-repudiation purposes by proving the authenticity and integrity of a message, preventing the sender from denying its origin.
Hashing provides integrity verification but does not inherently link the data to a specific sender for non-repudiation.
Symmetric encryption algorithms ensure confidentiality but do not provide a mechanism to prove the sender's identity for non-repudiation.
Digital signatures leverage public-key cryptography to create a cryptographic seal that uniquely links a message to its sender and proves its integrity. This process ensures non-repudiation because only the sender possesses the private key necessary to create the signature, making it impossible for them to credibly deny having signed the message.
Data loss prevention (DLP) is a system designed to prevent sensitive data from leaving an organization's control, not for non-repudiation.
Concept tested: Non-repudiation with digital signatures
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview#digital-signatures
Topics
Community Discussion
No community discussion yet for this question.