Question 1: A client disputes having signed a digital contract. The service provider needs to prove that the signature was indeed from the client and hasn’t been tampered with. Which of the following security concepts is the service provider relying on?

1. Authentication
2. Confidentiality
3. Non-repudiation
4. Access Control

Correct Answer: C. non-repudiation. Non-repudiation ensures that a party in a dispute cannot deny the
authenticity of their actions. In this scenario, it would provide evidence that the client did sign the contract and that it hasn’t been tampered with post-signature.

Option A is incorrect. Authentication confirms the identity of a user or system. While it plays a part in ensuring that the right person is accessing the system, it doesn’t directly provide evidence about the actions post-authentication, like signing a contract.

Option B is incorrect. Confidentiality ensures that information is only accessible to those with the appropriate permissions. It doesn’t provide evidence of an action being taken by a specific
entity.

Option D is incorrect. Access Control determines who or what can view or use resources in a computing environment. It doesn’t ensure the validity of actions taken within the system.