Examkin

Question

Difficulty: MediumCIA Triad and Non-Repudiation

An enterprise legal technology organization is upgrading its electronic contract processing platform. The platform must implement controls to guarantee non-repudiation so that signers cannot plausibly deny their participation in executing an agreement. Which of the following technical mechanisms directly satisfy the requirement for non-repudiation? (Select TWO.)

  1. Digitally signing document hashes using asymmetric private keys bound to individual signersAnswer
  2. Validating identity using Public Key Infrastructure (PKI) digital certificates issued by a trusted Certificate AuthorityAnswer
  3. C
    Generating Hash-based Message Authentication Codes (HMAC) using a symmetric secret key shared between servers
  4. D
    Enforcing Role-Based Access Control (RBAC) rules to restrict contract modification permissions to legal team members

Answer

The mechanisms that directly support non-repudiation are digitally signing document hashes using asymmetric private keys bound to individual signers and validating identity using PKI digital certificates issued by a trusted Certificate Authority.
Non-repudiation provides assurance that the sender of data cannot deny sending it. This is achieved through asymmetric digital signatures, where only the individual possessing the unique private key can generate the signature, and PKI digital certificates, which officially bind that public/private key pair to an authenticated individual identity.

Step-by-Step Solution

1
Analyze the core requirement
The requirement is non-repudiation, which ensures that an origin or author of data cannot deny having authored or sent the data.
Non-repudiation requires proof of identity linked to a unique cryptographic operation that only one entity could perform.
2
Evaluate cryptographic mechanisms
Asymmetric digital signatures combined with PKI certificates establish proof of origin linked to a specific verified identity.
Private keys are kept secret by the owner, and PKI certificates bind that identity to the matching public key.
3
Differentiate symmetric authentication and authorization controls
Symmetric HMAC keys and RBAC authorization policies do not provide non-repudiation.
Shared secret symmetric keys allow any key holder to create the hash digest, and authorization models govern access rights rather than cryptographic proof of origin.

Key Concept

Non-repudiation requires asymmetric cryptography and digital signatures anchored by PKI certificates, distinguishing it from integrity (hashing) and authorization controls.
Rate this question

Topics

CIA Triad and Non-Repudiation

More questions from this topic