212-82 practice question 3 of 10

Kayden successfully cracked the final round of interviews at an organization. After a few days, he received his offer letter through an official…

Full set: 159 questions

Domain Information Security Fundamentals

Kayden successfully cracked the final round of interviews at an organization. After a few days, he received his offer letter through an official company email address. The email stated that the selected candidate should respond within a specified time. Kayden accepted the opportunity and provided an e-signature on the offer letter, then replied to the same email address. The company validated the e-signature and added his details to their database. Here, Kayden could not deny the company's message, and the company could not deny Kayden's signature. Which of the following information security elements was described in the above scenario?
Answer options
A: Availability
B: Non-repudiation Correct answer
C: Integrity
D: Confidentiality
Correct Answer:
B. Non-repudiation
Explanation

Non-repudiation is an information security assurance that prevents an entity from denying having performed a specific action, such as sending a message, approving a transaction, or signing a document. By using digital or electronic signatures, the system cryptographically binds the identity of the signer to the document. In this scenario, because Kayden cannot deny signing the offer letter and the company cannot deny receiving it, the security element demonstrated is non-repudiation.

Why Incorrect

A. Availability: Ensures that authorized users have timely and reliable access to information systems and data, which is not the primary function of digital signatures.
C. Integrity: Ensures data has not been altered in transit, but on its own, it does not cryptographically prove the sender's identity to prevent denial of the action.
D. Confidentiality: Ensures that information is not disclosed to unauthorized individuals, typically achieved via encryption rather than digital signatures.

References

1. National Institute of Standards and Technology (NIST). (2017). An Introduction to Information Security (NIST SP 800-12 Rev. 1). Section 2.1: Security Objectives. https://doi.org/10.6028/NIST.SP.800-12r1

2. EC-Council. (2023). Certified Cybersecurity Technician (CCT) Official Courseware. Module: Information Security Threats and Vulnerabilities.

Scroll to Top