mediumMultiple ChoiceObjective-mapped
Non-Repudiation: Ensuring Users Cannot Deny Actions
Which security principle ensures that a user cannot deny having performed an action?
Quick Answer
The answer is non-repudiation, the security principle that ensures a user cannot deny having performed an action. This is correct because non-repudiation relies on cryptographic mechanisms like digital signatures within a Public Key Infrastructure (PKI), where a sender signs data with their private key, and the receiver verifies it with the corresponding public key, creating irrefutable proof of origin and integrity. On the Cisco CyberOps Associate 200-201 exam, this concept tests your understanding of how audit logs and digital signatures provide accountability in network security, often appearing in questions about incident response or evidence handling. A common trap is confusing non-repudiation with authentication—remember that authentication proves who you are, while non-repudiation proves you did it and cannot later deny it. A useful memory tip: think of a signed contract—once you sign it with your unique digital signature, you cannot claim you never signed it.
⚠ Common exam trap
Cisco often tests the distinction between integrity and non-repudiation, where candidates mistakenly choose integrity because they associate hashing with proof of origin, but integrity only verifies data has not changed, not who sent it.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Non-repudiation
Non-repudiation ensures that a user cannot deny having performed an action, typically by using cryptographic mechanisms such as digital signatures or audit logs. In network security, this is often implemented through protocols like PKI (Public Key Infrastructure) where a sender signs data with their private key, and the receiver verifies it with the corresponding public key, providing irrefutable proof of origin.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Availability
Why it's wrong here
Availability is about uptime.
- ✗
Confidentiality
Why it's wrong here
Confidentiality is about secrecy.
- ✓
Non-repudiation
Why this is correct
Non-repudiation provides undeniable evidence.
- ✗
Integrity
Why it's wrong here
Integrity is about data accuracy.
Go deeper
Related to this question
About these practice questions
This 200-201 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 200-201
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which principle ensures that a user cannot deny having performed an action?
easy- A.Authentication
- B.Accountability
- C.Authorization
- ✓ D.Non-repudiation
Why D: Non-repudiation ensures that a user cannot deny having performed an action, typically by using digital signatures or cryptographic mechanisms. In network security, this is often achieved through protocols like HMAC or digital certificates that bind an action to a specific identity, providing irrefutable proof. Without non-repudiation, a user could claim they never sent a message or executed a command, undermining audit trails and legal accountability.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.