nerdexam
CompTIA

SY0-501 · Question #538

Which of the following scenarios BEST describes an implementation of non-repudiation?

The correct answer is C. A user sends a digitally signed email to the entire finance department about an upcoming meeting. Non-repudiation is a security service that provides undeniable proof of the origin and integrity of data, preventing a sender from falsely denying they sent a message or that the message was altered.

Submitted by rohit_dlh· Mar 4, 2026General security concepts

Question

Which of the following scenarios BEST describes an implementation of non-repudiation?

Options

  • AA user logs into a domain workstation and access network file shares for another department
  • BA user remotely logs into the mail server with another user's credentials
  • CA user sends a digitally signed email to the entire finance department about an upcoming meeting
  • DA user access the workstation registry to make unauthorized changes to enable functionality

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    9% (2)
  • C
    83% (19)
  • D
    4% (1)

Why each option

Non-repudiation is a security service that provides undeniable proof of the origin and integrity of data, preventing a sender from falsely denying they sent a message or that the message was altered.

AA user logs into a domain workstation and access network file shares for another department

This scenario describes authentication and authorization for accessing resources, which is not an implementation of non-repudiation itself.

BA user remotely logs into the mail server with another user's credentials

This scenario describes a security breach related to unauthorized access and impersonation, not a mechanism for ensuring non-repudiation.

CA user sends a digitally signed email to the entire finance department about an upcoming meetingCorrect

A digitally signed email uses the sender's private key to create a unique cryptographic signature, which proves the sender's identity and the message's integrity; this cryptographic evidence prevents the sender from later denying they sent the email.

DA user access the workstation registry to make unauthorized changes to enable functionality

This scenario describes unauthorized system modification and a security violation, which is unrelated to implementing non-repudiation.

Concept tested: Non-repudiation with digital signatures

Source: https://learn.microsoft.com/en-us/windows/win32/security/what-is-nonrepudiation

Topics

#non-repudiation#digital signatures#email security#cryptography

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SY0-501 Practice