Question 807 of 1,000

Security Concepts →hardMultiple ChoiceObjective-mapped

200-201 Security Concepts Practice Question

Q: How is Security Concepts tested on the 200-201 exam?

Security Concepts — This question tests Security Concepts — Read the scenario before looking for a memorised answer..

Q: What is the correct answer to this Security Concepts 200-201 question?

The correct answer is: Non-repudiation — Non-repudiation ensures that a party cannot deny having performed a specific action, such as sending an email. This is typically achieved through digital signatures using asymmetric cryptography (e.g., RSA or ECDSA) and public key infrastructure (PKI), where the sender's private key creates a signature that can be verified by anyone with the sender's public key. The goal is to provide irrefutable proof of origin and integrity, preventing the sender from later claiming they did not send the message.

Q: Why do candidates get Security Concepts questions wrong on the 200-201 exam?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

This 200-201 practice question tests your understanding of security concepts. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

An organization wants to ensure that a user cannot deny having sent an email. Which security goal does this address?

A
Non-repudiation
Non-repudiation prevents denial of actions.
B
Availability
Why wrong: Availability ensures access, not non-repudiation.
C
Integrity
Why wrong: Integrity ensures data is not altered, not proof of origin.
D
Confidentiality
Why wrong: Confidentiality prevents unauthorized disclosure, not denial.

Full breakdown with real-world context →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Non-repudiation

Non-repudiation ensures that a party cannot deny having performed a specific action, such as sending an email. This is typically achieved through digital signatures using asymmetric cryptography (e.g., RSA or ECDSA) and public key infrastructure (PKI), where the sender's private key creates a signature that can be verified by anyone with the sender's public key. The goal is to provide irrefutable proof of origin and integrity, preventing the sender from later claiming they did not send the message.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Non-repudiation
Why this is correct
Non-repudiation prevents denial of actions.
Related concept
Read the scenario before looking for a memorised answer.
✗
Availability
Why it's wrong here
Availability ensures access, not non-repudiation.
✗
Integrity
Why it's wrong here
Integrity ensures data is not altered, not proof of origin.
✗
Confidentiality
Why it's wrong here
Confidentiality prevents unauthorized disclosure, not denial.

Common exam traps

Common exam trap: answer the scenario, not the keyword

Cisco often tests the distinction between integrity and non-repudiation, where candidates mistakenly choose integrity because they associate hashing with proof of origin, but integrity alone does not link the data to a specific sender.

Detailed technical explanation

How to think about this question

Non-repudiation relies on digital signatures that bind the sender's identity to the message. For email, protocols like S/MIME (Secure/Multipurpose Internet Mail Extensions) or PGP (Pretty Good Privacy) use the sender's private key to sign the message hash; the recipient verifies the signature with the sender's public key. A subtle behavior is that non-repudiation also requires a trusted timestamp (e.g., from an RFC 3161 Time-Stamp Authority) to prevent the sender from claiming the key was compromised after the fact.

KKey Concepts to Remember

Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.

TExam Day Tips

Watch for words such as best, first, most likely and least administrative effort.
Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A security administrator must allow nursing staff to reach a patient records server while blocking access from the guest Wi-Fi VLAN. After applying an extended ACL, traffic is still blocked from nursing workstations. The ACL was applied outbound instead of inbound on the wrong interface. Questions like this test ACL direction and placement rules.

Quick reference

Symmetric Encryption Algorithm Comparison

Algorithm	Key Size	Block Size	Status	Notes
AES-128	128-bit	128-bit	Current standard	NIST approved; WPA3, TLS
AES-256	256-bit	128-bit	Current standard	Preferred for sensitive / govt data
3DES	112-bit effective	64-bit	Deprecated (2023)	Replaced by AES
DES	56-bit	64-bit	Broken	Cracked in < 24 h; never deploy
ChaCha20	256-bit	Stream cipher	Current	TLS 1.3, WireGuard

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related 200-201 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Security Monitoring practice questions

Practise 200-201 questions linked to Security Monitoring.

Network Intrusion Analysis practice questions

Practise 200-201 questions linked to Network Intrusion Analysis.

Security Policies and Procedures practice questions

Practise 200-201 questions linked to Security Policies and Procedures.

Host-Based Analysis practice questions

Practise 200-201 questions linked to Host-Based Analysis.

Security Concepts practice questions

Practise 200-201 questions linked to Security Concepts.

200-201 fundamentals practice questions

Practise 200-201 questions linked to 200-201 fundamentals.

200-201 scenario practice questions

Practise 200-201 questions linked to 200-201 scenario.

200-201 troubleshooting practice questions

Practise 200-201 questions linked to 200-201 troubleshooting.

Practice this exam

Start a free 200-201 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

10 questions 20 questions 30 questions 50 questions Timed 30

200-201 practice-test guide →Study guide →Browse all practice tests

FAQ

Questions learners often ask

What does this 200-201 question test?

Security Concepts — This question tests Security Concepts — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: Non-repudiation — Non-repudiation ensures that a party cannot deny having performed a specific action, such as sending an email. This is typically achieved through digital signatures using asymmetric cryptography (e.g., RSA or ECDSA) and public key infrastructure (PKI), where the sender's private key creates a signature that can be verified by anyone with the sender's public key. The goal is to provide irrefutable proof of origin and integrity, preventing the sender from later claiming they did not send the message.

What should I do if I get this 200-201 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jul 4, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.