Examkin

Question

Difficulty: EasyCIA Triad and Non-Repudiation

An organization implements digital signatures for all high-value financial transactions to ensure that executives cannot deny approving a transaction after it has been submitted. Which security goal is primarily being addressed by this implementation?

  1. Non-repudiationAnswer
  2. B
    Confidentiality
  3. C
    Integrity
  4. D
    Authorization

Answer

Non-repudiation is the primary security goal addressed by using digital signatures to prevent users from denying their actions.
Non-repudiation ensures that an individual cannot deny the authenticity of their signature or action on a document or transaction. Digital signatures achieve this by utilizing asymmetric key cryptography, where the signer's unique private key creates a signature that anyone can verify using the corresponding public key.

Step-by-Step Solution

1
Analyze the scenario requirements
The core requirement is preventing an executive from denying that they approved a transaction.
Identifying the goal of preventing denial of an origin or action leads to the appropriate security concept.
2
Map the technical control to security objectives
Digital signatures bind sender identity verification with data integrity verification.
Combining sender identity proof via a private key with integrity verification guarantees proof of origin.
3
Select the matching security objective
Non-repudiation directly defines the property where a party to a transaction cannot deny authenticity.
Non-repudiation specifically satisfies the requirement of undeniable proof of origin and action.

Key Concept

Non-Repudiation
Estimated Time:45s
Rate this question

Topics

CIA Triad and Non-Repudiation

More questions from this topic