Question
PKI can be used to support security requirements in the change management process. Which of the following capabilities does PKI provide for messages?
- A. Non-repudiation Correct
- B. Confidentiality
- C. Delivery receipts
- D. Attestation
Explanation
When a message is signed with the sender's private key from a PKI-issued certificate, anyone can verify the signature with the matching public key, and the signer cannot credibly deny approving it. In change management this proves who requested or approved a change. PKI can also support confidentiality through encryption, but the capability the question targets for signed change messages is non-repudiation; delivery receipts and attestation are not PKI message capabilities.
