Examkin

Question

Difficulty: MediumCIA Triad and Non-Repudiation

An enterprise logistics company requires software engineers to digitally sign all infrastructure configuration files using their individual asymmetric private keys before pushing them to the automated build pipeline. If an unapproved configuration change causes a service outage, management must be able to indisputably prove which specific engineer authored and submitted the change. Which security principle is primarily fulfilled by this implementation?

  1. Non-repudiationAnswer
  2. B
    Integrity
  3. C
    Confidentiality
  4. D
    Authorization

Answer

Non-repudiation
Non-repudiation ensures that a sender or author cannot deny the authenticity of their signature on a document or file. By requiring engineers to sign configuration files with their asymmetric private keys, the system creates proof of origin linked uniquely to that individual.

Step-by-Step Solution

1
Analyze the core requirement presented in the scenario.
Management needs to indisputably identify which engineer authored a specific file change so that the author cannot deny responsibility.
Identifying the specific requirement helps distinguish between general data protection goals and specific cryptographic properties.
2
Evaluate the mechanism used (asymmetric key digital signatures).
Signing data with a private key uniquely binds that specific identity to the generated signature.
Because only the holder possesses the private key, valid signatures provide indisputable proof of origin.
3
Map the mechanism and requirement to the standard security goal.
Providing proof of origin to prevent denial of an action is the exact definition of non-repudiation.
Non-repudiation combines authenticity and integrity via asymmetric cryptography to ensure accountability.

Key Concept

Non-Repudiation
Rate this question

Topics

CIA Triad and Non-Repudiation

More questions from this topic