nerdexam
(ISC)2

CSSLP · Question #375

Which of the following can be used for non-repudiation purposes?

The correct answer is C. Digital signatures. Digital signatures can be used for non-repudiation purposes by proving the authenticity and integrity of a message, preventing the sender from denying its origin.

Secure Software Concepts

Question

Which of the following can be used for non-repudiation purposes?

Options

  • AHashing
  • BSymmetric encryption algorithms
  • CDigital signatures
  • DData loss prevention (DLP)

How the community answered

(13 responses)
  • C
    92% (12)
  • D
    8% (1)

Why each option

Digital signatures can be used for non-repudiation purposes by proving the authenticity and integrity of a message, preventing the sender from denying its origin.

AHashing

Hashing provides integrity verification but does not inherently link the data to a specific sender for non-repudiation.

BSymmetric encryption algorithms

Symmetric encryption algorithms ensure confidentiality but do not provide a mechanism to prove the sender's identity for non-repudiation.

CDigital signaturesCorrect

Digital signatures leverage public-key cryptography to create a cryptographic seal that uniquely links a message to its sender and proves its integrity. This process ensures non-repudiation because only the sender possesses the private key necessary to create the signature, making it impossible for them to credibly deny having signed the message.

DData loss prevention (DLP)

Data loss prevention (DLP) is a system designed to prevent sensitive data from leaving an organization's control, not for non-repudiation.

Concept tested: Non-repudiation with digital signatures

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview#digital-signatures

Topics

#Non-repudiation#Digital signatures#Cryptography#Security services

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice