Examkin

Question

Difficulty: EasyCIA Triad and Non-Repudiation

A security analyst configures an automated reporting tool to sign all generated financial reports using an asymmetric private key. Which of the following core security objectives are directly provided by using digital signatures in this scenario? (Select TWO.)

  1. IntegrityAnswer
  2. Non-repudiationAnswer
  3. C
    Confidentiality
  4. D
    Availability

Answer

The core security objectives directly provided by digital signatures are Integrity and Non-repudiation.
Digital signatures provide integrity by allowing recipients to detect document modification through cryptographic hashing, and non-repudiation by binding the signature uniquely to the sender's private key.

Step-by-Step Solution

1
Identify the cryptographic mechanism described in the scenario.
The scenario uses asymmetric digital signatures applied to financial reports.
Determining the security control type is necessary to evaluate which security pillars it fulfills.
2
Evaluate how digital signatures affect data tampering.
A cryptographic hash verified by the signature ensures the data has not been altered in transit or storage.
This satisfies the requirement for integrity.
3
Evaluate how asymmetric keys establish proof of origin.
Because the signing key is private to the origin, the sender cannot plausibly deny signing the message.
This satisfies the requirement for non-repudiation.

Key Concept

Digital signatures combine hashing and asymmetric cryptography to guarantee integrity and non-repudiation without encrypting the underlying data for confidentiality.
Rate this question

Topics

CIA Triad and Non-Repudiation

More questions from this topic