nerdexam
CompTIA

SY0-301 · Question #31

An email client says a digital signature is invalid and the sender cannot be verified. The recipient is concerned with which of the following concepts?

The correct answer is A. Integrity. An invalid digital signature means the recipient cannot verify the sender's identity or confirm the message was not altered, which is a concern of integrity.

General security concepts

Question

An email client says a digital signature is invalid and the sender cannot be verified. The recipient is concerned with which of the following concepts?

Options

  • AIntegrity
  • BAvailability
  • CConfidentiality
  • DRemediation

How the community answered

(38 responses)
  • A
    92% (35)
  • B
    3% (1)
  • C
    5% (2)

Why each option

An invalid digital signature means the recipient cannot verify the sender's identity or confirm the message was not altered, which is a concern of integrity.

AIntegrityCorrect

Digital signatures use asymmetric cryptography to provide non-repudiation and message integrity. When a signature fails validation, it indicates the message may have been tampered with in transit or the sender cannot be confirmed, which is the core definition of an integrity failure.

BAvailability

Availability concerns system uptime and resource accessibility, not the authenticity of a message sender.

CConfidentiality

Confidentiality relates to preventing unauthorized disclosure of data, not verifying whether a message was altered or who sent it.

DRemediation

Remediation is the process of correcting a vulnerability or incident after it is identified, not a core security principle related to signatures.

Concept tested: Digital signatures and message integrity

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-how-smart-card-sign-in-works-in-windows

Topics

#digital signatures#integrity#CIA triad#PKI

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice