A security architect is designing a solution for a financial transaction system that requires proof of the sender's identity and prevents the sender from denying they sent a message. Which security pillar is the architect primarily addressing?
The correct answer is nonrepudiation. Nonrepudiation is the security pillar that provides assurance that someone cannot deny the validity of something. In the context of financial transactions, nonrepudiation mechanisms ensure that the sender of a message cannot later deny having sent it. This is typically accomplished through digital signatures, timestamps, audit trails, and other cryptographic techniques that bind an action to the identity who performed it.
Authenticity primarily indicates verification that something is genuine or from the purported source, not preventing denial of sending. Confidentiality focuses on protecting data from unauthorized access. Integrity ensures data remains unchanged in transit or storage. Availability ensures systems and data are accessible when needed. None of these other pillars directly address preventing the sender from denying their actions.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are some common methods to achieve nonrepudiation?
Open an interactive chat with Bash
How do digital signatures work in the context of nonrepudiation?
Open an interactive chat with Bash
How does nonrepudiation differ from authenticity and integrity?
Open an interactive chat with Bash
ISC2 CISSP
Security Architecture and Engineering
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access