Examkin

Soru

Zorluk: OrtaCIA Triad and Non-Repudiation

An enterprise legal technology organization is upgrading its electronic contract processing platform. The platform must implement controls to guarantee non-repudiation so that signers cannot plausibly deny their participation in executing an agreement. Which of the following technical mechanisms directly satisfy the requirement for non-repudiation? (Select TWO.)

  1. Digitally signing document hashes using asymmetric private keys bound to individual signersCevap
  2. Validating identity using Public Key Infrastructure (PKI) digital certificates issued by a trusted Certificate AuthorityCevap
  3. C
    Generating Hash-based Message Authentication Codes (HMAC) using a symmetric secret key shared between servers
  4. D
    Enforcing Role-Based Access Control (RBAC) rules to restrict contract modification permissions to legal team members

Cevap

The mechanisms that directly support non-repudiation are digitally signing document hashes using asymmetric private keys bound to individual signers and validating identity using PKI digital certificates issued by a trusted Certificate Authority.
Non-repudiation provides assurance that the sender of data cannot deny sending it. This is achieved through asymmetric digital signatures, where only the individual possessing the unique private key can generate the signature, and PKI digital certificates, which officially bind that public/private key pair to an authenticated individual identity.

Adım Adım Çözüm

1
Analyze the core requirement
The requirement is non-repudiation, which ensures that an origin or author of data cannot deny having authored or sent the data.
Non-repudiation requires proof of identity linked to a unique cryptographic operation that only one entity could perform.
2
Evaluate cryptographic mechanisms
Asymmetric digital signatures combined with PKI certificates establish proof of origin linked to a specific verified identity.
Private keys are kept secret by the owner, and PKI certificates bind that identity to the matching public key.
3
Differentiate symmetric authentication and authorization controls
Symmetric HMAC keys and RBAC authorization policies do not provide non-repudiation.
Shared secret symmetric keys allow any key holder to create the hash digest, and authorization models govern access rights rather than cryptographic proof of origin.

Anahtar Kavram

Non-repudiation requires asymmetric cryptography and digital signatures anchored by PKI certificates, distinguishing it from integrity (hashing) and authorization controls.
Bu soruyu puanla

Konular

CIA Triad and Non-Repudiation

Bu konudan daha fazla soru