Cisco CyberOps Associate (CBROPS) 200-201Security ConceptsMedium
A security architect is designing a system that requires ensuring data not only remains confidential but also that its origin can be reliably proven and that the sender cannot later deny having sent it. Which cryptographic principle is crucial for addressing the 'sender cannot deny' requirement?
- AAvailability
- BIntegrity
- CConfidentiality
- DNon-repudiation
Show answer & explanationAnswer & explanation
Correct answer: D. Non-repudiation
Non-repudiation ensures that a party cannot successfully deny having performed an action (e.g., sending a message or signing a document). It provides irrefutable proof of origin and integrity, preventing the sender from later disclaiming responsibility.
Why the other options are wrong
- A. Availability ensures systems and data are accessible when needed, which is unrelated to proving sender identity.
- B. Integrity ensures data has not been altered or destroyed, but doesn't inherently prevent a sender from denying origin.
- C. Confidentiality protects data from unauthorized disclosure, not from a sender denying their actions.
Non-repudiation
A security principle that guarantees that a party to a transaction or communication cannot later deny having performed the action. It provides irrefutable proof of origin and integrity, often achieved through digital signatures and timestamping.
- Prevents false denial by sender.
- Provides proof of origin and integrity.
- Often implemented with digital signatures.
Memory trick: Non-repudiation is like a signed contract, you can't deny it later.