ISC2 Exam ISSAP Topic 4 Question 50 Discussion

Confidentiality: A PKI encrypts stored or transmitted data.

Integrity: A PKI digitally signs the data. A digital signature can identify whether the data is modified by another user or not.

Authenticity: A PKI uses several authentication methods to authenticate the users. Authentication data produces a message digest by

passing through hash algorithms. The message digest is digitally signed by using the sender's private key to verify that this message

digest is produced by the sender.

Nonrepudiation: The digital signature of the data offers a way to proof the integrity and origin of the data. A third party can verify this

integrity and origin of the data at any time. The owner of the certificate cannot disprove this verification.

Answer options C and B are incorrect. These are not the goals of a public key infrastructure.