nerdexam
GIAC

GISP · Question #266

Which of the following layers of the OSI model provides non-repudiation services?

The correct answer is A. The application layer. Non-repudiation - the ability to prove that a specific party sent or received data, preventing them from denying it later - is implemented at the Application layer (A) through mechanisms like digital signatures, audit logs, and PKI-based authentication that operate within…

Cryptography and Communication Security

Question

Which of the following layers of the OSI model provides non-repudiation services?

Options

  • AThe application layer
  • BThe data-link layer
  • CThe presentation layer
  • DThe physical layer

How the community answered

(25 responses)
  • A
    72% (18)
  • B
    16% (4)
  • C
    4% (1)
  • D
    8% (2)

Explanation

Non-repudiation - the ability to prove that a specific party sent or received data, preventing them from denying it later - is implemented at the Application layer (A) through mechanisms like digital signatures, audit logs, and PKI-based authentication that operate within specific applications (email clients, web apps, etc.).

The Data-link layer (B) handles frame delivery between directly connected nodes (MAC addressing, error detection) and has no concept of user identity or proof of origin. The Presentation layer (C) handles data formatting, encryption/decryption, and compression - while it enables encryption that supports security, it doesn't enforce accountability of parties. The Physical layer (D) deals only with raw bit transmission over physical media and has no security awareness whatsoever.

Memory tip: Think "Accountability lives at the Application layer" - non-repudiation requires application-level context (who the user is, what they did), which only Layer 7 can provide.

Topics

#Non-repudiation#OSI Model#Application Layer#Digital Signatures

Community Discussion

No community discussion yet for this question.

Full GISP Practice