022.1 Cryptography and Public Key Infrastructure (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 7)

Questions 31–31

1. 31application · medium

   A security auditor is reviewing a system where users submit sensitive forms. The auditor wants to ensure that a user cannot later deny having submitted a specific form and that the form's content was not altered after submission. Which cryptographic mechanism should be used to provide both non-repudiation and integrity for each submission?

   • AEncrypt the form with a symmetric key shared between the user and the server.
   • BEncrypt the form with the server's public key and store the ciphertext.
   • CHave the user sign the hash of the form with their private key and store the signature with the form.
   • DStore a SHA-256 hash of the form in a separate database.
   Reveal Solution Discussion Select an answer first