Examkin

Question

Difficulty: MediumCIA Triad & Core Security Concepts

An enterprise organization experiences a security incident where a system administrator denies executing a set of unauthorized configuration changes on a core network switch, claiming another user forged their session. The security team must implement a technical control that ensures administrative actions can be cryptographically traced to a specific individual who cannot later deny performing them. Which of the following security concepts best meets this operational requirement?

  1. Non-repudiation enforced through asymmetric digital signaturesAnswer
  2. B
    Confidentiality enforced through AES-256 symmetric payload encryption
  3. C
    Availability enforced through redundant SNMPv2c management traps
  4. D
    Authentication enforced through RADIUS shared secret authentication

Answer

Non-repudiation enforced through asymmetric digital signatures
Non-repudiation ensures that an individual cannot dispute the validity of their action or command. Asymmetric digital signatures provide non-repudiation because the signature can only be created using the sender's private key, guaranteeing both authenticity and accountability.

Step-by-Step Solution

1
Analyze the core security requirement in the scenario.
The requirement focuses on ensuring an administrator cannot deny performing specific logged actions, which is the core definition of non-repudiation.
Non-repudiation ensures that the origin or execution of a transaction/command cannot be refuted by the party responsible.
2
Identify the cryptographic mechanism supporting non-repudiation.
Asymmetric cryptography using private keys creates digital signatures tied uniquely to an individual.
Because only the specific individual possesses their private key, a valid digital signature proves identity and action beyond reasonable doubt.

Key Concept

CIA Triad & Core Security Concepts - Non-repudiation and Asymmetric Digital Signatures
Estimated Time:1m 15s
Rate this question

Topics

CIA Triad & Core Security Concepts

More questions from this topic