GISP · Question #266
Which of the following layers of the OSI model provides non-repudiation services?
The correct answer is A. The application layer. Non-repudiation - the ability to prove that a specific party sent or received data, preventing them from denying it later - is implemented at the Application layer (A) through mechanisms like digital signatures, audit logs, and PKI-based authentication that operate within…
Question
Options
- AThe application layer
- BThe data-link layer
- CThe presentation layer
- DThe physical layer
How the community answered
(25 responses)- A72% (18)
- B16% (4)
- C4% (1)
- D8% (2)
Explanation
Non-repudiation - the ability to prove that a specific party sent or received data, preventing them from denying it later - is implemented at the Application layer (A) through mechanisms like digital signatures, audit logs, and PKI-based authentication that operate within specific applications (email clients, web apps, etc.).
The Data-link layer (B) handles frame delivery between directly connected nodes (MAC addressing, error detection) and has no concept of user identity or proof of origin. The Presentation layer (C) handles data formatting, encryption/decryption, and compression - while it enables encryption that supports security, it doesn't enforce accountability of parties. The Physical layer (D) deals only with raw bit transmission over physical media and has no security awareness whatsoever.
Memory tip: Think "Accountability lives at the Application layer" - non-repudiation requires application-level context (who the user is, what they did), which only Layer 7 can provide.
Topics
Community Discussion
No community discussion yet for this question.